An independent vulnerability laboratory researcher discovered a client-side url redirect web vulnerability in the official PayPal Inc Notify online service web-application.

WordPress mTheme-Unus theme versions prior to 2.3 suffer from a local file inclusion vulnerability.

Western Digital My Cloud with firmware versions 04.01.03-421 and 04.01.04-422 suffer from a command injection vulnerability.

Mitsubishi Melsec FX3G-24M suffers from a denial of service vulnerability.

Kaseya Virtual System Administrator suffers from multiple code execution vulnerabilities and a privilege escalation vulnerability. VSA versions 7.0.0.0 through 7.0.0.32, 8.0.0.0 through 8.0.0.22, 9.0.0.0 through 9.0.0.18, and 9.1.0.0 through 9.1.0.8…

Proof of concept exploit code for the Linux Rowhammer DRAM privilege escalation vulnerability.

This Metasploit module exploits a SQL query functionality in ManageEngine EventLog Analyzer v10.6 build 10060 and previous versions. Every authenticated user, including the default “guest” account can execute SQL queries…

WinRAR SFX version 5.21 suffers from a remote code execution vulnerability.

BisonWare BisonFTP version 3.5 suffers from a directory traversal vulnerability.

The latest version of the Vector.primitive length check in Flash 18,0,0,232 is not robust against memory corruptions such as heap overflows. While it is no longer possible to obviously bypass…