>> ARCHIVE: 2021-07

VirTool.Win32.Afix malware suffers from buffer overflow and code execution vulnerabilities.

WordPress WPFront Notification Bar plugin version 1.9.1.04012 suffers from a persistent cross site scripting vulnerability.

Garbage Collection Management System version 1.0 shell upload exploit that leverages a SQL injection vulnerability.

Backdoor.Win32.Surila.j malware suffers from a denial of service vulnerability.

Invoice System version 1.0 suffers from a persistent cross site scripting vulnerability.

VirTool.Win32.Afix malware suffers from buffer overflow and code execution vulnerabilities.

This Metasploit module leverages a pre-authentication remote code execution vulnerability in the OpenAM identity and access management solution. The vulnerability arises from a Java deserialization flaw in OpenAM’s implementation of…

This Metasploit module exploits Java unsafe reflection and SSRF in the VMware vCenter Server Virtual SAN Health Check plugin’s ProxygenController class to execute code as the vsphere-ui user. See the…