>> ARCHIVE: 2021-01

Backdoor.Win32.Zombam.a malware suffers from a remote stack buffer overflow vulnerability.

SmartAgent version 3.1.0 suffers from a privilege escalation vulnerability.

Cemetery Mapping and Information System version 1.0 suffers from multiple remote SQL injection vulnerabilities.

Gila CMS version 2.0.0 suffers from a remote code execution vulnerability.

WordPress AIT CSV Import/Export plugin versions 3.0.3 and below allow unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded…

This Metasploit module exploits a vulnerability in cldflt.sys. The Cloud Filter driver on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IO_FORCE_ACCESS_CHECK or…