TortoiseSVN 1.12.1 – Remote Code Execution
>> ARCHIVE: 2019-08
TortoiseSVN 1.12.1 – Remote Code Execution
D-Link DIR-600M – Authentication Bypass (Metasploit)
WordPress Plugin Download Manager 2.5 – Cross-Site Request Forgery
Windows PowerShell – Unsanitized Filename Command Execution
Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – ‘customfields.php’ SQL Injection
SugarCRM Enterprise 9.0.0 – Cross-Site Scripting
Ghidra (Linux) version 9.0.4 suffers from a .gar related arbitrary code execution vulnerability.
Joomla JS Jobs component version 1.2.5 suffers from a remote SQL injection vulnerability in cities.php.
This Metasploit module exploits a security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques.
UNA version 10.0.0 RC1 suffers from a persistent cross site scripting vulnerability in polyglot.php.