>> ARCHIVE: 2022-05

Google Chrome version 78.0.3904.70 suffers from a use-after-free vulnerability that allows for remote code execution.

PyScript version 2022-05-04-Alpha suffers from a source code disclosure vulnerability.

DLINK DAP-1620 A1 version 1.01 suffers from a directory traversal vulnerability.

Beehive Forum version 1.5.2 suffers from an account takeover vulnerability.

MyBB version 1.8.29 suffers from a remote code execution vulnerability.

WordPress Blue Admin plugin version 21.06.01 suffers from a cross site request forgery vulnerability.

Joomla SexyPolling version 2.1.7 suffers from a remote SQL injection vulnerability.

Ruijie Reyee mesh routers with ReyeeOS version 1.55.1915 EW_3.0(1)B11P35 and EW_3.0(1)B11P55 suffer from a remote code execution vulnerability.

This Metasploit module exploits a stack buffer overflow in the Cisco RV series router’s SSL VPN functionality. The default SSL VPN configuration is exploitable, with no authentication required and works…