>> ARCHIVE: 2018-12

WordPress WP-Ajax-Form-Pro plugin version 5.0.2 suffers from a remote shell upload vulnerability.

SQLScan version 1.0 denial of service proof of concept exploit.

ATool version 1.0.0.22 suffers from a kernel pool buffer overflow vulnerability.

Base64 Decoder version 1.1.2 SEH local buffer overflow exploit.

XMPlay version 3.8.3 local stack overflow exploit that results in code execution.

Proof of concept zero day exploit that demonstrates being able to read any file on Microsoft Windows.

WordPress FCKEditor-For-Wordpress-Plugin plugin version 3.3.1 suffers from a remote shell upload vulnerability.

WordPress St_Newsletter Swift Mailer plugin version 2.7 suffers from a remote shell upload vulnerability.

WordPress Monsters-Editor-10-For-WP-Super-Edit plugin version 2.3.1 suffers from a remote shell upload vulnerability.