M-Files Web versions prior to 20.10.9524.1 and M-Files Web versions prior to 20.10.9445.0 contain an improper range header processing vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping…

Backdoor.Win32.Vernet.axt malware suffers from an insecure permissions vulnerability.

Backdoor.Win32.Bionet.10 malware suffers from bypass and code execution vulnerabilities.

Online Magazine Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

WordPress DZS Zoomsounds plugin version 6.45 suffers from an unauthenticated arbitrary file read vulnerability.

Backdoor.Win32.WinShell.50 malware suffers from a hard-coded password vulnerability.

WordPress Slider By Soliloquy plugin version 2.6.2 suffers from a persistent cross site scripting vulnerability.

This Metasploit module exploits a vulnerability in Ubuntu’s implementation of overlayfs. The vulnerability is the result of failing to verify the ability of a user to set the attributes in…

WordPress All-In-One Video Gallery plugin versions 2.4.9 and below suffer from a local file inclusion vulnerability.

Backdoor.Win32.WinShell.50 malware suffers from a hard-coded password vulnerability.