:: Deepquest ::

WordPress Calls to Action plugin version 2.4.3 suffers from a cross site scripting vulnerability.

WordPress Gwolle Guestbook plugin version 1.5.3 suffers from a remote file inclusion vulnerability.

WordPress Ultimate Member plugin version 1.3.28 suffers from a cross site scripting vulnerability.

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The prepareAudioToPlay method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM. Authentication is not required to exploit this vulnerability.

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The processEvaluation method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM.

IP.Board 4.1.4.x – Persistent XSS Vulnerability

Malwarebytes Antivirus 2.2.0 – DoS PoC

WordPress Users Ultra Plugin 1.5.50 – Persistent XSS

Sysaid Helpdesk Software 14.4.32 b25 – SQL Injection

Gnome Nautilus 3.16 – Denial of Service