>> ARCHIVE: 2017-12

Easy!Appointments version 1.2.1 suffers from multiple cross site scripting vulnerabilities.

NetWin SurgeFTP version 23f2 suffers from multiple persistent cross site scripting vulnerabilities.

NetTransport Download Manager version 2.96L suffers from a buffer overflow vulnerability.

Xerox DC260 EFI Fiery Controller Webtools version 2.0 suffers from an arbitrary file disclosure vulnerability.

pfSense, a free BSD based open source firewall distribution, versions 2.2.6 and below contain a remote command execution vulnerability post authentication in the _rrd_graph_img.php page. The vulnerability occurs via the…

This Metasploit module exploits an OS Command Injection vulnerability in Cambium ePMP1000 device management portal. It requires any one of the following login credentials – admin/admin, installer/installer, home/home – to…

This Metasploit module exploits an OS Command Injection vulnerability in Cambium ePMP1000 device management portal. It requires any one of the following login credentials – admin/admin, installer/installer, home/home – to…

Joomla! JEXTN FAQ Pro component version 4.0.0 suffers from a remote SQL injection vulnerability.