Category: Security

[webapps] – WordPress Booking Calendar Plugin 6.2 – SQL Injection

[webapps] – WordPress WP Live Chat Support Plugin 6.2.03 – Stored XSS

[papers] – [Hebrew] Digital Whisper Security Magazine #74

[webapps] – WordPress ALO EasyMail Newsletter Plugin 2.9.2 – (Add/Import Arbitrary Subscribers) CSRF

[papers] Hacking the PS4, part 3 – Kernel exploitation

[local] – mySCADAPro 7 – Local Privilege Escalation

[local] – VUPlayer 2.49 – (.pls) Stack Buffer Overflow (DEP Bypass)

[webapps] – AXIS Multiple Products – Authenticated Remote Command Execution via devtools Vector

[webapps] – WordPress Ultimate Product Catalog 3.9.8 – (do_shortcode via ajax) Blind SQL Injection

[remote] – Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 – Post Auth Remote Root Exploit (Metasploit) (3)