>> ARCHIVE: 2021-10

Backdoor.Win32.Yoddos.an malware suffers from an unquoted service path vulnerability.

HEUR.Trojan.Win32.Generic malware suffers from an unquoted service path vulnerability.

Student Quarterly Grading System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Backdoor.Win32.Bifrose.ahyg malware suffers from an insecure permissions vulnerability.

Try My Recipe suffers from a remote SQL injection vulnerability.

Backdoor.Win32.Hupigon.gy malware suffers from an unauthenticated open proxy vulnerability.

Atlassian Confluence Server version 7.5.1 suffers from a pre-authorization arbitrary file read vulnerability.

Trojan-PSW.Win32.PdPinch.gen malware suffers from a denial of service vulnerability.

WordPress TheCartPress plugin version 1.5.3.6 suffers from a privilege escalation vulnerability.

WordPress MStore API plugin version 2.0.6 suffers from a remote shell upload vulnerability.