Trojan-Dropper.Win32.Agent.xtp malware suffers from an insecure permissions vulnerability.
Backdoor.Win32.DarkKomet.artr malware suffers from an insecure permissions vulnerability.
OTRS version 6.0.1 remote command execution exploit.
Packed.Win32.Black.d malware has an unauthenticated open proxy vulnerability.
BMD BMDWeb 2.0 versions prior to 24.01.21 suffer from persistent cross site scripting vulnerabilities.
CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)
OTRS 6.0.1 – Remote Command Execution (2)
Cisco RV-series routers suffer from an authentication bypass vulnerability. The RV34X series are also affected by a command injection vulnerability in the sessionid cookie, when requesting the /upload endpoint. A…
Phone Shop Sales Management System version 1.0 suffers from a remote shell upload vulnerability.
Fibaro Home Center Light and Fibaro Home Center 2 versions 4.600 and below suffer from man-in-the-middle, missing authentication, remote command execution, and missing encryption vulnerabilities.