Imperva SecureSphere 13.x – ‘PWS’ Command Injection (Metasploit)
Imperva SecureSphere 13.x – ‘PWS’ Command Injection (Metasploit)
Android – getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass
Linux < 4.20.14 – Virtual Address 0 is Mappable via Privileged write() to /proc/*/mem
Android – binder Use-After-Free via racy Initialization of ->allow_user_free
Xoops version 1.0.2 with PD-Links module version 1.0 suffers from a database disclosure vulnerability.
Kache as of commit de2c39491625c3f087027be961a17191e85f6d30 suffers from a cross protocol request forgery vulnerability.
Joomla ModPPCSimpleSpotLight module versions 1.2 and 3.0 suffer from cross site request forgery and remote shell upload vulnerabilities.
1C-Bitrix Site Management Russia version 2.0 suffers from an open redirection vulnerability.
WordPress WP-DreamworkGallery plugin version 2.3 suffers from cross site request forgery and remote shell upload vulnerabilities.
zzzphp CMS version 1.6.1 suffers from a cross site request forgery vulnerability.