>> AUTHOR: deepcore

The Vulnerability Laboratory Core Research Team discovered a Unencrypted User`s DM & User Information Vulnerability in the official PayPal Inc Mobile API for Android.

WordPress WP Advanced Importer plugin version 2.1.1 suffers from a cross site scripting vulnerability.

WordPress Extra User Details plugin version 0.4.2 suffers from a privilege escalation vulnerability.

WordPress WP Ultimate Exporter plugin version 1.0 suffers from a cross site scripting vulnerability.

WordPress Import Woocommerce plugin version 1.0.1 suffers from a cross site scripting vulnerability.

RozBlog Weblog Service suffers from cross site request forgery and cross site scripting vulnerabilities.

Compass Security discovered a web application security flaw in the OpenAM application which allows an attacker to launch phishing attacks against users by redirecting them to a malicious website. An…

WordPress Calculated Fields Form plugin versions 1.0.x and below suffer from Http_only bypass and session hijacking vulnerabilities.

In certain kernel versions it is possible to use the AIO subsystem (io_submit syscall) to pass size values larger than MAX_RW_COUNT to the networking subsystem’s sendmsg implementation. In the L2TP…