>> CATEGORY: exploit

MobileGo version 8.5.0 suffers from an insecure file permission vulnerability.

Centova Cast versions 3.2.11 and below suffer from an arbitrary file download vulnerability.

This Metasploit module will bypass Windows UAC by hijacking a special key in the Registry under the current user hive, and inserting a custom command that will get invoked when…

Shrew Soft VPN Client version 2.2.2 suffers from an unquoted service path vulnerability.

iOS suffers from a sandbox escape vulnerability due to an integer overflow in mediaserverd.

TP-Link Archer VR300 version 1 suffers from a persistent cross site scripting vulnerability.

WordPress Social Gallery plugin version 1.0 suffers from a remote code execution vulnerability.

Raritan CommandCenter Secure Gateway versions prior to 8.0.0 suffer from a cross site scripting vulnerability.

FreeRadius versions 3.0.19 and below suffer from a privilege escalation vulnerability via insecure logrotate use.

oXygen XML Editor version 21.1.1 suffers from an XML external entity injection vulnerability.