>> CATEGORY: exploit

IBM Cognos version 11.0 suffers from a content spoofing vulnerability.

Joomla Jumi component version 3.0.5 suffers from a cross site scripting vulnerability.

This Metasploit module exploits a PHP object injection vulnerability in Magento 2.0.6 or prior.

This is a local proof of concept that simulates a keystroke to allow access when a firewall dialog comes up.

Liferay supports OpenID login which was found to make use of a version of openid4java that is vulnerable to XML External Entity (XXE) attacks. Liferay versions 6.2.3 CE GA4 and…

rConfig versions 3.1.1 and below suffer from a local file inclusion vulnerability.

Babylon Translator suffers from a cross site scripting vulnerability.

Nagios XI versions 5.2.7 and below suffer from command execution, privilege escalation, server-side request forgery, and remote SQL injection vulnerabilities.

CCextractor version 0.80 suffers from an access violation crash issue.

Microsoft Internet Explorer 8 user mode write AV proof of concept code.