>> CATEGORY: exploit

vBulletin version 4.2.5 with Advanced User Tagging version 3.1.3 suffers from an open redirection vulnerability.

vBulletin version 4.x.x with vB Optimise version 2.6.3 Pro suffers from an open redirection vulnerability.

XenForo version 1.5.x with Advanced Application Forms version 1.2.2 suffers from an open redirection vulnerability.

XenForo version 1.5.x suffers from an open redirection vulnerability.

CMSsite version 1.0 suffers from multiple cross site request forgery vulnerabilities.

OOP CMS BLOG version 1.0 suffers from cross site request forgery and remote SQL injection vulnerabilities.

FileZilla version 3.40.0 suffers from multiple denial of service vulnerabilities.

XNU suffers from a copy-on-write behavior bypass via mount of user-owned filesystem image.

TransMac version 12.3 suffers from a denial of service vulnerability.

This Metasploit module exploits an arbitrary command execution vulnerability in Usermin 1.750 and lower versions. This vulnerability has the same characteristics as the Webmin 1.900 RCE.