>> CATEGORY: exploit

Jobs2Careers / Coroflot Clone suffer from a remote SQL injection vulnerability.

HP iMC Plat version 7.2 suffers from a remote code execution vulnerability.

WinduCMS versions 3.1 and below suffer from a local file disclosure vulnerability.

FortiGate SSL VPN Portal versions 5.6.2 and below, 5.4.6 and below, 5.2.12 and below, and 5.0 and below suffer from a cross site scripting vulnerability.

WAGO PFC 200 Series suffers from multiple unauthenticated access bypass vulnerabilities.

OpenEMR version 5.0.0 suffers from code execution and cross site scripting vulnerabilities.

ZKTeco ZKTime Web version 2.0.1.12280 suffers from a cross site scripting vulnerability.

ZKTeco ZKTime Web version 2.0.1.12280 suffers from a cross site request forgery vulnerability.

WordPress WooCommerce plugin versions 2.0 and 3.0 suffer from a directory traversal vulnerability.

This is a proof of concept for the Huge Dirty Cow vulnerability (CVE-2017-1000405). Before running, make sure to set transparent huge pages to “always” with “echo always | sudo tee…