>> CATEGORY: exploit

AvantFAX version 3.3.3 suffers from a cross site scripting vulnerability.

DiskBoss Enterprise version 8.5.12 suffers from a denial of service vulnerability.

Vanilla Forums versions prior to 2.1.5 suffer from a cross site request forgery vulnerability.

Sync Breeze Enterprise version 10.1.16 suffers from a denial of service vulnerability.

Disk Pulse Enterprise version 10.1.18 suffers from a denial of service vulnerability.

VX Search Enterprise version 10.1.12 suffers from a denial of service vulnerability.

Yawcam versions 0.2.6 through 0.6.0 suffer from a directory traversal vulnerability.

This Metasploit module exploits multiple vulnerabilities in Synology PhotoStation. When combined these issues can be leveraged to gain a remote root shell.

Synology PhotoStation versions 6.7.2-3429 and below suffer from file disclosure and remote SQL injection vulnerabilities.

This Metasploit module exploits a command injection vulnerability discovered in Commvault Service v11 SP5 and earlier versions (tested in v11 SP5 and v10). The vulnerability exists in the cvd.exe service…