>> CATEGORY: exploit

BugNET version 1.6.315.0 suffers from a cross site scripting vulnerability.

WinSCP version 5.9.1 suffers from a DLL hijacking vulnerability.

OoVoo version 3.7.1 suffers from a DLL hijacking vulnerability.

PHPHolidays CMS version 3.00.50 suffers from a cross site scripting vulnerability.

WordPress Cubed theme version 1.2 suffers from cross site request forgery and remote file upload vulnerabilities.

WordPress version 4.5.3 suffers from a cross site scripting vulnerability when an uploaded image filename has a malicious payload inserted.

No abstract description available in the upcomings!

This Metasploit module exploits a PHP Object Injection vulnerability in SugarCRM CE <= 6.5.23 which could be abused to allow unauthenticated users to execute arbitrary PHP code with the permissions…

Adobe ColdFusion versions 11 and below suffer from an XML external entity (XXE) injection vulnerability.

Infoblox versions 7.0.1 suffers from a cross site scripting vulnerability.