>> ARCHIVE: 2016-09

WordPress Woocommerce version 2.6.2 suffers from an API related cross site scripting vulnerability.

Google Docs appears to suffer from XSPA and SSRF vulnerabilities.

LamaHub version 0.0.6.2 suffers from a buffer overflow vulnerability.

Vodafone Mobile Wifi reset administrative password exploit.

LogMeIn client version 1.3.2462 (64bit) suffers from a local credential memory disclosure vulnerability.

Zabbix versions 2.0 through 3.0.3 remote SQL injection exploit.

Jobberbase version 2.0 suffers from code execution, open redirect, path disclosure, unrestricted file upload, and SQL injection vulnerabilities.

OoVoo version 3.7.1 suffers from a DLL hijacking vulnerability.

WinSCP version 5.9.1 suffers from a DLL hijacking vulnerability.

BugNET version 1.6.315.0 suffers from a cross site scripting vulnerability.