>> ARCHIVE: 2015-09

VuFind version 1.0 suffers from a cross site scripting vulnerability.

The Good Mobile Device Management solution suffers from an insecure application-coupling vulnerability.

WinRaR SFX remote code execution exploit that just requires a malicious file to get loaded.

X2Engine version 4.2 suffers from multiple cross site scripting vulnerabilities.

X2Engine version 4.2 suffers from a remote arbitrary file upload vulnerability.

X2Engine version 4.2 suffers from cross site request forgery vulnerabilities.

This Metasploit module exploits a vulnerability in the Watchguard XCS ‘FixCorruptMail’ script called by root’s crontab which can be exploited to run a command as root within 3 minutes.

This Metasploit module exploits two separate vulnerabilities found in the Watchguard XCS virtual appliance to gain command execution. By exploiting an unauthenticated SQL injection, a remote attacker may insert a…

Flowdock API suffered from a script insertion vulnerability.

Due to a server misconfiguration, customers of Unified Layer suffer from a remote shell upload vulnerability.