>> CATEGORY: exploit

Sonicwall SRA version 8.1.0.2-14sv gencsr.cgi remote command injection exploit.

Citrix SD-WAN version 9.1.2.26.561201 logout cookie pre-authentication remote command injection exploit.

Sonicwall version 8.1.0.2-14sv importlogo/sitecustomization remote command execution exploit.

Citrix CloudBridge suffers from a CAKEPHP pre-authentication remote root cookie command injection vulnerability.

WordPress Task Manager Pro version 1.31 suffers from multiple cross site scripting vulnerabilities.

Sonicwall Secure Remote Access (SRA) version 8.1.0.2-14sv suffers from a remote command injection vulnerability.

Joomla JoomRecipe component version 1.0.4 suffers from a remote SQL injection vulnerability in search_author.

SKILLS.com.au Industry App version 1.0 suffers from a remote code execution vulnerability via man-in-the-middle attacks.

Virtual Postage (VPA) version 1.0 suffers from a remote code execution vulnerability via man-in-the-middle attacks.

Trustonic’s Trusted Execution Environment (TEE) OS fails to perform revocation of trustlets.