This Metasploit module exploits a flaw in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to command execution with root…
>> CATEGORY: exploit
Snapforce CRM version 8.3.0 suffers from multiple cross site scripting vulnerabilities.
Endian Firewall version 3.3.0 suffers from a cross site scripting vulnerability.
Wikindx version 5.8.2 suffers from a remote SQL injection vulnerability.
The NTFS driver supports a new FS control code to set a mount point which the existing sandbox mitigation doesn’t support allowing a sandboxed application to set an arbitrary mount…
Zoho Corporation ManageEngine ServiceDesk Plus 10 versions prior to 10509 suffer from an information leakage vulnerability.
This Metasploit module exploits Pulse Secure SSL VPN versions 8.1R15.1, 8.2, 8.3, and 9.0 which suffer from an arbitrary file disclosure vulnerability.
KBPublisher version 6.0.2.1 suffers from multiple remote SQL injection vulnerabilities.