WordPress TheCartPress plugin version 1.5.3.6 suffers from a privilege escalation vulnerability.

WordPress MStore API plugin version 2.0.6 suffers from a remote shell upload vulnerability.

Atlassian Jira Server/Data Center version 8.4.0 suffers from a limited remote file read vulnerability.

HackTool.Win32.Agent.gi malware suffers from a buffer overflow vulnerability.

Backdoor.Win32.Prorat.lkt malware suffers from a weak hardcoded password vulnerability.

dH team discovered a PHP object injection vulnerability in all Tapatalk plugins that can allow attackers to execute PHP code, perform SQL injection, or cause denial of service conditions.

Backdoor.Win32.Prorat.lkt malware suffers from a man-in-the-middle vulnerability.