Oracle Fatwire 6.3 – Multiple Vulnerabilities
CloverDX 5.9.0 – Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
Care2x Integrated Hospital Info System 2.7 – ‘Multiple’ SQL Injection
IntelliChoice eFORCE Software Suite 2.5.9 – Username Enumeration
Longjing Technology BEMS API 1.21 – Remote Arbitrary File Download
Denver IP Camera SHO-110 – Unauthenticated Snapshot
Backdoor.Win32.WinShell.40 malware suffers from a code execution vulnerability.
WordPress Social Warfare plugin version 3.5.2 remote code execution exploit. This fully automated exploit is a variation of the original discovery made by Luka Sikic and hash3liZer in May of…
PHP version 7.3.15-3 suffers from a PHP_SESSION_UPLOAD_PROGRESS session data injection vulnerability.