>> ARCHIVE: 2022-09

pfBlockerNG version 2.1.4_26 unauthenticated remote shell upload exploit.

osCommerce Shopping Cart version 4 suffers from a cross site scripting vulnerability.

LivelyCart Pro version 3 suffers from a cross site scripting vulnerability.

Active eCommerce CMS version 6.3.0 suffers from an arbitrary file download vulnerability.

Active eCommerce CMS version 6.3.0 suffers from a cross site scripting vulnerability.

Backdoor.Win32.Bingle.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Psychward.b malware suffers from a hardcoded credential vulnerability.

WooCommerce plugin BRW Booking Rental version 1.3.1 from Ovatheme suffers from a cross site scripting vulnerability.

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.

WordPress Sabai Discuss plugin version 1.4.13 suffers from a cross site scripting vulnerability.