Yahei-PHP Prober version 0.4.7 (speed) suffers from a remote html injection vulnerability.

Zurmo version 3.2.6 suffers from reflective cross site scripting vulnerabilities.

Zurmo version 3.2.6 suffers from a code evaluation vulnerability.

WebKit suffers from a universal cross site scripting vulnerability due to synchronous page loads.

iMessage suffers from an out-of-bounds read vulnerability in DigitalTouch tap message processing.

Microsoft Windows 7 Build 7601 (x86) local privilege escalation exploit.

Moodle Filepicker version 3.5.2 suffers from a server-side request forgery vulnerability.

pdfresurrect version 0.15 suffers from a buffer overflow vulnerability.

Ahsay Backup versions 7.x through 8.1.1.50 suffer from authenticated arbitrary file upload and remote code execution vulnerabilities.

This Metasploit module exploits an authenticated insecure file upload and code execution flaw in Ahsay Backup versions 7.x through 8.1.1.50. To successfully execute the upload credentials are needed, default on…