>> ARCHIVE: 2018-05

NewsBee CMS version 1.4 suffers from a cross site request forgery vulnerability.

GNU glibc versions prior to 2.27 suffer from a buffer overflow vulnerability.

LikeSoftware CMS suffers from cross site request forgery and remote shell upload vulnerabilities.

PaulNews version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

Microsoft Internet Explorer 11 on Windows 7 x64/x86 suffers from a vbscript code execution vulnerability.

PHP Login and User Management versions 4.1.0 and below suffers from a remote shell upload vulnerability.

This Metasploit module exploits a remote command injection vulnerability in D-Link DSL-2750B devices. Vulnerability can be exploited through “cli” parameter that is directly used to invoke “ayecli” binary. Vulnerable firmwares…