Backdoor.Win32.Agent.afq malware suffers from a directory traversal vulnerability.
>> ARCHIVE: 2021-04
Backdoor.Win32.Agent.afq malware suffers from a heap corruption vulnerability.
Android suffers from an out-of-bounds write in the NFC stack when handling MIFARE Classic TLVs.
PFSense version 2.5.0 suffers from a persistent cross site scripting vulnerability.
FOGProject 1.5.9 – File Upload RCE (Authenticated)
Cacti 1.2.12 – ‘filter’ SQL Injection / Remote Code Execution
http://mhkpeo.go.th/er.php notified by LahBodoAmat
Kirby CMS 3.5.3.1 – ‘file’ Cross-Site Scripting (XSS)
Montiorr version 1.7.6m suffers from a cross site scripting vulnerability via a file upload.
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests; however, that feature is disabled by default. In Druid versions prior to 0.20.1, an…