KARMA version 6.0.0 suffers from a remote SQL injection vulnerability.

This Module will generate and upload an executable to a remote host and then makes it a persistent service. It will create a new service which will start the payload…

WordPress Lumise plugin version 4.9 suffers from a database disclosure vulnerability.

WordPress Ithemes-BackupBuddy Amazon WP-S3 plugin version 2.9 suffers from a database disclosure vulnerability.

WordPress Mirrorwp-Backups plugin version 4.8 suffers from a database disclosure vulnerability.

WordPress Dev-Custom-Management VerzDesign plugin version 1.0 suffers from database disclosure and remote shell upload vulnerabilities.

Simple CMS PHPJabbers Stivasoft version 4.0 suffers from a database disclosure vulnerability.

ITAdvisorsNepal 9Qube Testimonials module version 1.0 suffers from a database disclosure vulnerability.

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API.

Razer Cortex has a CEF debugger stub enabled by default allowing arbitrary remote command execution.