>> ARCHIVE: 2019-04

WordPress Contact Form Maker plugin version 1.13.1 suffers from a cross site request forgery vulnerability.

AIDA64 Extreme version 5.99.5900 logging SEH buffer overflow exploit.

Manage Engine ServiceDesk Plus version 9.3 suffers from a privilege escalation vulnerability.

FreeSMS version 2.1.2 suffers from a remote SQL injection vulnerability.

This Metasploit module exploits a path traversal and a local file inclusion vulnerability on WordPress versions 5.0.0 and versions below or equal to 4.9.8. The crop-image function allows a user,…

iScripts ReserveLogic suffers from a remote SQL injection vulnerability.

Ashop Shopping Cart Software suffers from a remote SQL injection vulnerability.

AIDA64 Business version 5.99.4900 SEH buffer overflow exploit with egghunter.

PhreeBooks ERP version 5.2.3 suffers from an arbitrary file upload vulnerability.

PhreeBooks ERP version 5.2.3 suffers from a remote command execution vulnerability.