>> ARCHIVE: 2018-08

cPanel versions 76 and below suffer from a filename based cross site scripting vulnerability.

Jetty version 6.1.6 suffers from a cross site scripting vulnerability.

This Metasploit module exploits a stack buffer overflow in Cloudme version 1.8.x and 1.9.x.

Wansview version 1.0.2 suffers from a denial of service vulnerability.

Nasdaq BWise version 5.0 suffers from a JMX/RMI interface remote code execution vulnerability.

This Metasploit module exploits a directory traversal vulnerability in cgit versions prior to 1.2.1.

ASUSTOR NAS ADM version 3.1.0 suffers from code execution and remote SQL injection vulnerabilities.

Foxit Reader version 9.0.1.1049 remote code execution exploit with DEP bypass on heap with shellcode.

Async-IO.org Atmosphere suffers from a cross site scripting vulnerability. Versions affected include 2.4.0 through 2.4.28, 2.3.0 through 2.3.9, 2.2.0 through 2.2.12, 2.1.0 through 2.1.13, 2.0.0 through 2.0.11, and 1.0.0 through…

ownCloud version 3.7.3 for iOS suffers from a cross site scripting vulnerability.