>> AUTHOR: deepcore

Zeeways Matrimony CMS suffers from a remote SQL injection vulnerability.

Zeeways Jobsite CMS suffers from a remote SQL injection vulnerability.

SPIP CMS versions 2.x and 3.x suffer from unauthenticated add administrator and arbitrary file upload vulnerabilities.

PCMan FTP Server version 2.0 CDUP remote buffer overflow exploit.

DASAN H660RM allows for unauthenticated ping access, has a hardcoded key for encryption, and logs sensitive information into /tmp.

WordPress article2pdf plugin versions 0.24 and above suffer from resource exhaustion, arbitrary file download, and file deletion vulnerabilities.

RedTeam Pentesting discovered that the shell function “getopt_simple”, as presented in the “Advanced Bash-Scripting Guide”, allows execution of attacker-controlled commands.