>> CATEGORY: exploit

Jungo DriverWizard WinDrive suffers from a kernel pool overflow vulnerability.

Apache Struts versions 2.5 through 2.5.12 REST plugin XStream remote code execution exploit.

FiberHome suffers from an unauthenticated ADSL router factory reset vulnerability.

WordPress Ads Pro plugin versions 3.4 and below suffers from cross site scripting and remote SQL injection vulnerabilities.

WordPress Gym Management System versions 07-05-2017 and below suffer from code execution and cross site scripting vulnerabilities.

The vulnerability laboratory core research team discovered a persistent input validation web vulnerability in the micros…

A2billing versions 2.1.1 and below suffer from a remote SQL injection vulnerability.

A2billing version 2.x suffers from backup disclosure, remote code execution, and remote SQL injection vulnerabilities.

Mongoose Web Server version 6.5 suffers from cross site request forgery and remote command execution vulnerabilities.

NEC EXPRESS CLUSTER comes with Cluster Manager, a Java applet for cluster configuration and management. The underlying webserver ‘clpwebmc’ runs as root and accepts connections on TCP port 29003 which…