This Metasploit module abuses a feature in WebLogic Server’s Administration Console to install a malicious Java application in order to gain remote code execution. Authentication is required, however by default,…

Cyberoam Transparent Authentication Suite version 2.1.2.5 Fully Qualified Domain Name and NetBIOS Name proof of concept denial of service exploits.

WordPress lqcPlugin-regiePublicites plugin version 1.0 suffers from an open redirection vulnerability.

WordPress 4DMayi theme version 4.6 suffers from an open redirection vulnerability.

WordPress DingTalk theme version LTS 4.6 suffers from an open redirection vulnerability.

WordPress LaneMotorSport Responsive theme version 1.8.4 suffers from an open redirection vulnerability.

Joomla Attachments component version 3.x suffers from a remote file upload vulnerability.

MacOS X versions 10.14.5 and below suffer from a Gatekeeper bypass vulnerability.

Deltek Maconomy version 2.2.5 suffers from a local file inclusion vulnerability.

Kanboard version 1.2.7 suffers from a cross site scripting vulnerability.