>> CATEGORY: exploit

Simple Mobile Comparison Website version 1.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.Acropolis.10 malware suffers from an insecure permissions vulnerability.

Adobe ColdFusion version 11.0.03.292866 suffers from an LDAP Java object deserialization remote code execution vulnerability.

aaPanel version 6.8.21 suffers from a directory traversal vulnerability.

Backdoor.Win32.FTP.Ics malware suffers from a man-in-the-middle vulnerability.

WebHMI version 4.1 suffers from a persistent cross site scripting vulnerability.

WebHMI version 4.1.1 suffers from an authenticated remote code execution vulnerability.

Backdoor.Win32.FTP.Ics malware suffers from bypass and code execution vulnerabilities.

Microweber CMS version 1.2.10 has a backup functionality that enables a local file inclusion vulnerability.

Backdoor.Win32.FTP.Ics malware suffers from an unauthenticated remote command execution vulnerability.