>> ARCHIVE: 2019-05

Joomla JiFile component version 2.3.1 suffers from an arbitrary file download vulnerability.

Agent Tesla Botnet suffers from an information leakage vulnerability.

This Metasploit module exploits a PHP unserialize() in Pimcore before 5.7.1 to execute arbitrary code. An authenticated user with “classes” permission could exploit the vulnerability. The vulnerability exists in the…

This Metasploit module creates a pre-invoke hook for APT in apt.conf.d. The hook name syntax is numeric followed by text.

This Metasploit module will execute an arbitrary payload on an “ESEL” server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also…

Linux suffers from a missing locking between ELF coredump code and userfaultfd VMA modification.

Revive Adserver versions prior to 4.2.0 suffers from deserialization and open redirection vulnerabilities.