>> ARCHIVE: 2017-05

WordPress Huge-IT Video Gallery plugin version 2.0.4 suffers from a remote SQL injection vulnerability.

WordPress AffiliateWP plugin versions 2.0.8 and below suffer from a cross site scripting vulnerability.

JAD Java Decompiler version 1.5.8e suffers from a local buffer overflow vulnerability.

This Metasploit module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This Metasploit module requires valid credentials, a writeable folder in an…

This Metasploit module can be used to execute a payload on an Octopus Deploy server given valid credentials or an API key. The payload is executed as a powershell script…