Plastic SCM version 10.0.16.5622 suffers from an insecure direct object reference vulnerability that lets an attacker set the administrative password.
>> AUTHOR: deepcore
Worm.Win32.Runfer.bpo malware suffers from an unquoted service path vulnerability.
WordPress Duplicator plugin version 1.3.26 suffers from an unauthenticated arbitrary file read vulnerability.
Trojan-Proxy.Win32.Ranky.z malware suffers from an unauthenticated open proxy vulnerability.
Engineers Online Portal version 1.0 suffers from remote SQL injection vulnerabilities.
Virus.Win32.Ipamor.c malware suffers from an unauthenticated remote system reboot vulnerability.
Mitsubishi Electric and INEA SmartRTU suffer from a cross site scripting vulnerability.
Backdoor.Win32.LanFiltrator.11.b malware suffers from a code execution vulnerability.
Mitsubishi Electric and INEA SmartRTU suffer from a source code disclosure vulnerability.
Backdoor.Win32.LanaFTP.k malware suffers from a heap corruption vulnerability.