Nimble Stream versions 3.0.2-2 up to 3.5.4.9 suffer from a directory traversal vulnerability.

This Metasploit module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project’s site. Unknown…

This Metasploit module exploits a flaw in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to command execution with root…

Snapforce CRM version 8.3.0 suffers from multiple cross site scripting vulnerabilities.

Wikindx version 5.8.2 suffers from a remote SQL injection vulnerability.

Endian Firewall version 3.3.0 suffers from a cross site scripting vulnerability.