>> CATEGORY: exploit

GitList version 0.6 unauthenticated remote code execution exploit.

This Metasploit module exploits a Drupal property injection in the Forms API. Drupal versions 6.x, less than 7.58, 8.2.x, less than 8.3.9, less than 8.4.6, and less than 8.5.1 are…

PRTG version 18.1.39.1648 suffers from a stack overflow vulnerability.

Monstra CMS version 3.0.4 suffers from a persistent cross site scripting vulnerability.

Ncomputing vSpace Pro versions 10 and 11 suffer from a directory traversal vulnerability.

Apache CouchDB versions 1.7.0 and 2.x before 2.1.1 suffer from a remote privilege escalation vulnerability.

phpMyAdmin versions 4.8.0 prior to 4.8.0-1 suffer from a cross site request forgery vulnerability.

WordPress WD Instagram Feed version 1.3.0 suffers from multiple cross site scripting vulnerabilities.

R version 3.4.4 suffers from a local buffer overflow vulnerability.