>> ARCHIVE: 2016-08

WordPress WP Live Chat plugin version 6.2.03 suffers from a cross site scripting vulnerability.

Car CMS version 3.00.30 suffers from a cross site scripting vulnerability.

WordPress ALO EasyMail Newsletter plugin version 2.9.2 suffers from a cross site request forgery vulnerability.

DMA Radius Manager versions 4.1.5 and below suffer from a cross site request forgery vulnerability.

mySCADAPro version 7 suffers from a local privilege escalation vulnerability.

Halliburton LogView Pro version 9.7.5 crash proof of concept exploit.

Guppy CMS version 5.01.03 suffers from a client-side cross site scripting vulnerability.

VUPlayer version 2.49 .pls file stack buffer overflow exploit with DEP bypass.

WinSaber suffers from an unquoted service path privilege escalation vulnerability.

Joomla BreezingForms component version 1.8.x suffers from a remote shell upload vulnerability.