>> ARCHIVE: 2016-10

Colorful Blog suffers from a persistent cross site scripting vulnerability.

ATKGFNEXSrv ATKGFNEX version 1.0.11.1 suffers from an unquoted service path privilege escalation vulnerability.

Colorful Blog suffers from a cross site request forgery vulnerability.

ASLDRService ATK Hotkey version 1.0.69.0 suffers from an unquoted service path privilege escalation vulnerability.

InsOnSrv Asus InstantOn version 2.3.1.1 suffers from an unquoted service path privilege escalation vulnerability.

Simple Blog PHP version 2.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

Simple Blog PHP version 2.0 suffers from a remote SQL injection vulnerability.

WordPress Newsletter plugin version 4.6.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

This Metasploit module exploits a remote code execution vulnerability in the explicit render method when leveraging user parameters. This Metasploit module has been tested across multiple versions of Ruby on…

Thatware version 0.4.6 suffers from a remote SQL injection vulnerability.