WordPress Easy Media Download plugin version 1.1.4 suffers from a persistent cross site scripting vulnerability.

WordPress NextGen Gallery Sell Photo plugin version 1.0.5 suffers from a persistent cross site scripting vulnerability.

Bludit version 3.9.2 suffer from an authentication bruteforce mitigation bypass vulnerability.

Microsoft SharePoint Server 2019 remote code execution exploit.

WordPress Responsive Lightbox2 plugin version 1.0.2 suffers from a persistent cross site scripting vulnerability.

WordPress Colorbox Lightbox plugin version 1.1.2 suffers from a persistent cross site scripting vulnerability.

XenForo version 2.1.0 Patch 2 suffers from a cross site scripting vulnerability.

WordPress Fancybox Lightbox plugin version 1.0.1 suffers from a persistent cross site scripting vulnerability.

Samsung Android suffers from a heap buffer overflow vulnerability and other issues in the Skia Qmage image codec.

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz’s unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.