>> CATEGORY: exploit

Joomla JCK Editor plugin version 6.4.4 remote SQL injection exploit.

Hotel and Lodge Management System version 1.0 suffers from a remote shell upload vulnerability.

WordPress SuperStoreFinder and SuperInteractiveMaps plugins version 6.3 and below suffer from a remote SQL injection vulnerability.

This Metasploit module exploits an unauthenticated OVA file upload and path traversal in VMware vCenter Server to write a JSP payload to a web-accessible directory. Fixed versions are 6.5 Update…

bVPN version 2.5.1 suffers from an unquoted service path vulnerability.

Emerson Smart Wireless Gateway version 1420 4.6.59 suffers from a privilege escalation vulnerability.

Emerson Smart Wireless Gateway version 1420 4.6.59 suffers from a missing authentication vulnerability.

Froala version 3.2.6-1 suffers from persistent cross site scripting vulnerabilities.

FreeLAN version 2.2 suffers from an unquoted service path vulnerability.

Golden FTP Server version 4.70 PASS buffer overflow exploit.