>> ARCHIVE: 2021-03

Backdoor.Win32.Antilam.14.o malware suffers from a code execution vulnerability.

Backdoor.Win32.GTbot.c malware suffers from an insecure permissions vulnerability.

GLPI versions 9.5.3 and below suffer from a fromtype unsafe reflection vulnerability.

Joomla Matukio Events component version 7.0.5 suffers from a persistent cross site scripting vulnerability.

Joomla JCK Editor plugin version 6.4.4 remote SQL injection exploit.

Backdoor.Win32.Agent.bjev malware suffers from an insecure permissions vulnerability.

Hotel and Lodge Management System version 1.0 suffers from a remote shell upload vulnerability.

WordPress SuperStoreFinder and SuperInteractiveMaps plugins version 6.3 and below suffer from a remote SQL injection vulnerability.

This Metasploit module exploits an unauthenticated OVA file upload and path traversal in VMware vCenter Server to write a JSP payload to a web-accessible directory. Fixed versions are 6.5 Update…

bVPN version 2.5.1 suffers from an unquoted service path vulnerability.