>> ARCHIVE: 2018-10

Photo Nettoyeur version 1.4.5 suffers from an insecure file permission vulnerability.

LayerBB Forum version 1.1.1 suffers from a remote SQL injection vulnerability.

NICO-FTP version 3.0.1.19 suffers from a buffer overflow vulnerability.

virtualenv version 16.0.0 suffers from a sandbox escape vulnerability.

WordPress Pie Register plugin version 3.0.15 suffers from a cross site scripting vulnerability.

ISPConfig versions prior to 3.1.13 remote command execution exploit.

D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected.