PHP-Fusion version 9.03.60 PHP object injection to SQL injection pre-authentication exploit.
This Metasploit module will send arbitrary file_paths to the GOG GalaxyClientService, which will be executed with SYSTEM privileges (verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are also…
10-Strike Bandwidth Monitor version 3.9 services Svc10StrikeBandMontitor, Svc10StrikeBMWD, and Svc10StrikeBMAgent suffer from unquoted service path vulnerabilities.
This Metasploit module exploits a buffer overflow vulnerability in Documalis Free PDF Editor.
This Metasploit module exploits a buffer overflow vulnerability in Documalis Free PDF Scanner.
This Metasploit module exploits a shell upload vulnerability in Neon LMS versions prior to 4.9.1.
Gila CMS 1.11.8 – ‘query’ SQL Injection
Bandwidth Monitor 3.9 – ‘Svc10StrikeBandMontitor’ Unquoted Service Path
Netgear R7000 Router – Remote Code Execution
SOS JobScheduler 1.13.3 – Stored Password Decryption