>> AUTHOR: deepcore

Agent Tesla Botnet suffers from an information leakage vulnerability.

This Metasploit module exploits a PHP unserialize() in Pimcore before 5.7.1 to execute arbitrary code. An authenticated user with “classes” permission could exploit the vulnerability. The vulnerability exists in the…

This Metasploit module creates a pre-invoke hook for APT in apt.conf.d. The hook name syntax is numeric followed by text.

This Metasploit module will execute an arbitrary payload on an “ESEL” server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also…

Linux suffers from a missing locking between ELF coredump code and userfaultfd VMA modification.

Revive Adserver versions prior to 4.2.0 suffers from deserialization and open redirection vulnerabilities.

Freefloat FTP Server version 1.0 suffers from a SIZE remote buffer overflow vulnerability.

Freefloat FTP Server version 1.0 suffers from a STOR remote buffer overflow vulnerability.

Netgear DGN2200 and DGND3700 proof of concept administrative password disclosure exploit.

Veeam ONE Reporter version 9.5.0.3201 suffers from multiple cross site request forgery vulnerabilities.