>> CATEGORY: exploit

Atom CMS version 2.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.Freddy.2001 malware suffers from authentication bypass and remote command execution vulnerabilities.

This Metasploit module exploits a command injection vulnerability in Grandstream GXV31XX IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands….

WordPress Security Audit plugin version 1.0.0 suffers from a persistent cross site scripting vulnerability.

FileBrowser versions 2.17.2 and below suffer from a cross site request forgery vulnerability that can lead to remote code execution.

WordPress CP Blocks plugin version 1.0.14 suffers from a persistent cross site scripting vulnerability.

WordPress Contact Form Builder plugin version 1.6.1 suffers from a cross site scripting vulnerability.

Hotel Reservation System version 1.0 suffers from a remote SQL injection vulnerability.

Wing FTP Server versions 4.3.8 and below suffer from an authenticated remote code execution vulnerability.

WordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.