>> ARCHIVE: 2015-12

WordPress Calls to Action plugin version 2.4.3 suffers from a cross site scripting vulnerability.

WordPress Gwolle Guestbook plugin version 1.5.3 suffers from a remote file inclusion vulnerability.

WordPress Ultimate Member plugin version 1.3.28 suffers from a cross site scripting vulnerability.

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The prepareAudioToPlay method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain…

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The processEvaluation method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain…