WP Good News Themes – CS Cross Site Web Vulnerability

An independent vulnerability laboratory researcher discovered a client-side cross site scripting web vulnerability in the official WordPress Good News Themes.

Zimbra 8.0.9 GA Cross Site Request Forgery

Zimbra versions 8.0.9 GA and below suffer from a cross site request forgery vulnerability.

Centreon 2.5.3 Code Execution

Centreon versions 2.5.3 and below suffer from a remote code execution vulnerability.

Proxmox VE 3 / 4 XSS / Privilege Escalation / Code Execution

Proxmox VE versions 3 and 4 suffers from privilege escalation, code execution, and cross site scripting vulnerabilities.

[webapps] – WordPress More Fields <= 2.1 Plugin – CSRF Vulnerability

WordPress More Fields <= 2.1 Plugin – CSRF Vulnerability

[local] – Comodo Anti-Virus SHFolder.DLL – Local Privilege Elevation Exploit

Comodo Anti-Virus SHFolder.DLL – Local Privilege Elevation Exploit

GIMP For Windows DLL Hijacking

GIMP for Windows suffers from a dll hijacking vulnerability.

WordPress User Submitted Posts 20151113 Cross Site Scripting

WordPress User Submitted Posts plugin version 20151113 suffers from a persistent cross site scripting vulnerability.

JSN PowerAdmin 2.3.0 Code Exection / CSRF / XSS

JSN PowerAdmin Joomla! extension version 2.3.0 suffers from cross site request forgery, code execution, and cross site scripting vulnerabilities.

Open Web Analytics 1.5.7 Cross Site Scripting

Open Web Analytics version 1.5.7 suffers from a cross site scripting vulnerability.