>> CATEGORY: Security

Dolibarr ERP-CRM 10.0.1 – ‘elemid’ SQL Injection

WordPress 5.2.3 – Cross-Site Host Modification

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Remote Code Execution

AwindInc SNMP Service – Command Injection (Metasploit)

WordPress Plugin Download Manager 2.9.93 – Cross-Site Scripting

DASAN Zhone ZNID GPON 2426A EU – Multiple Cross-Site Scripting

ktsuss 1.4 – suid Privilege Escalation (Metasploit)

ptrace – Sudo Token Privilege Escalation (Metasploit)

Cisco UCS Director – default scpuser password (Metasploit)

ChaosPro 2.1 – SEH Buffer Overflow