This archive contains all of the 210 exploits added to Packet Storm in November, 2018.

Joomla JCE component versions 2.6.7.1 through 2.6.33 suffer from an arbitrary file upload vulnerability.

Joomla JCE component versions 2.5.24 through 2.6.33 suffer from a database backup disclosure vulnerability.

The KPOT Botnet suffers from an arbitrary file disclosure vulnerability that can also disclose credentials.

Schneider Electric PLC suffers from a session calculation authentication bypass vulnerability.

Linux Kernel version 4.8 on Ubuntu 16.04 suffers from an sctp kernel pointer leak vulnerability.

This Metasploit module exploits a stack based buffer overflow in HTML5 Video Player 1.2.5.

xorg-x11-server versions prior to 1.20.3 modulepath local privilege escalation exploit.

WordPress wawp_framework plugin version 1.0 suffers from a database backup disclosure vulnerability.

WordPress pm_market plugin version 1.0 suffers from a database backup disclosure vulnerability.