Cisco Small Business switches versions 200, 300, and 500 suffer from information leakage and open redirection vulnerabilities.

PCMan FTP Server 2 ALLO remote buffer overflow exploit.

FlightPath versions prior to 4.8.2 and 5.0-rc2 suffer from a local file inclusion vulnerability.

Microsoft Windows Remote Desktop BlueKeep denial of service exploit.

VideoPlayer on Android versions 7 through 9 suffer from an ihevcd_parse_pps out-of-bounds write vulnerability.

Netgear WiFi router versions JWNR2010v5 and R6080 suffer from authentication bypass vulnerabilities.

Streamripper version 2.6 Song Pattern buffer overflow exploit.

Citrix SD-WAN Appliance version 10.2.2 suffers from authentication bypass and remote command execution vulnerabilities.

Microsoft Windows suffers from an HTTP to SMB NTLM reflection that leads to a privilege escalation.

This Metasploit module exploits a vulnerability in the PHP Laravel Framework for versions 5.5.40, 5.6.x up to 5.6.29. Remote command execution is possible via a correctly formatted HTTP X-XSRF-TOKEN header,…