>> ARCHIVE: 2022-12

Consultine Consulting Business and Finance Website CMS version 1.8 has been reported as having a default backdoor account.

Courier Deprixa version 2.5 has been reported as having a default backdoor account.

Enlightenment version 0.25.3 suffers from a local privilege escalation vulnerability.

Enlightenment version 0.25.3 suffers from a local privilege escalation vulnerability.

Stock Management System 2022 version 1.0 from Erick Cesar suffers from a remote SQL injection vulnerability.

WordPress Yith WooCommerce Gift Cards Premium plugin versions 3.19.0 and below suffer from a remote shell upload vulnerability.

This Metasploit module exploits an unauthenticated command injection vulnerability in the yrange parameter in OpenTSDB through 2.4.0 (CVE-2020-35476) in order to achieve unauthenticated remote code execution as the root user….