PlaySMS – index.php Unauthenticated Template Injection Code Execution (Metasploit)
PlaySMS – index.php Unauthenticated Template Injection Code Execution (Metasploit)
Pandora FMS – Ping Authenticated Remote Code Execution (Metasploit)
Liferay Portal – Java Unmarshalling via JSONWS RCE (Metasploit)
ThinkPHP – Multiple PHP Injection RCEs (Metasploit)
TP-Link Archer A7/C7 – Unauthenticated LAN Remote Code Execution (Metasploit)
VMware Fusion – USB Arbitrator Setuid Privilege Escalation (Metasploit)
Free Desktop Clock version 3.0 unicode SEH stack overflow exploit.
Subex ROC Partner Settlement version 10.5 suffers from an insecure direct object reference vulnerability in the change password function that can allow for account takeover.
Webtateas version 2.0 suffers from an arbitrary file read vulnerability.
Huawei HG630 2 Router suffers from an authentication bypass vulnerability.