>> ARCHIVE: 2020-11

Wondershare Driver Install Service Help version 10.7.1.321 suffers from an unquoted service path vulnerability.

osCommerce version 2.3.4.1 suffers from a persistent cross site scripting vulnerability.

SyncBreeze version 10.0.28 suffers from a remote buffer overflow vulnerability.

This Metasploit module exploits WordPress Simple File List plugin versions prior to 4.2.3, which allows remote unauthenticated attackers to upload files within a controlled list of extensions. However, the rename…

This Metasploit module uses the Kong admin API to create a route and a serverless function plugin that is associated with the route. The plugin runs Lua code and is…

This Metasploit module exploits an authenticated PHP code injection vulnerability found in openmediavault versions before 4.1.36 and 5.x versions before 5.5.12 inclusive in the “sortfield” POST parameter of the rpc.php…

Apache OpenMeetings version 5.0.0 suffers from a denial of service vulnerability.

nopCommerce Store version 4.30 suffers from a persistent cross site scripting vulnerability.