WordPress Plugin wpDiscuz 7.0.4 – Arbitrary File Upload Exploit
The WordPress plugin wpDiscuz version 7.0.4 suffers an arbitrary file upload vulnerability that does not require authentication.
Category: Exploits
MyBB 1.8.25 – Chained Remote Command Execution Exploit
MyBB version 1.8.25 suffers from a chained remote command execution (RCE) flaw. Upgrade to version 1.8.26
Microsoft Internet Explorer 11 32-bit – Use-After-Free Exploit
Microsoft Windows Internet Explorer 11 32-bit adition suffers a Use-After-Free Exploit
Pixelimity 1.0 – ‘password’ Cross-Site Request Forgery Vulnerability
The software Pixelimity version 1.0 suffers from a password CSRF (Cross Site Request Forgery) vulnerability.
Roundcube Webmail 1.2 – File Disclosure Vulnerability
The software Roundcube Webmail version 1.2 suffers from a File Disclosure vulnerability.
WordPress 5.0.0 – Image Remote Code Execution
The WordPress CMS version 5.0.0 suffers from a Image Remote Code Execution vulnerability via access with at least an Author account.
SonicWall SSL-VPN 8.0.0.0 Vulnerable to ‘shellshock/visualdoor’ Remote Code Execution (Unauthenticated)
SonicWall SSL-Virutal Private Network version 8.0.0.0 is vulnerable to “shellshock/visualdoor” RCE (Remote Code Execution) Unauthenticated.
MyBB Timeline Plugin 1.0 – Cross-Site Scripting / CSRF
The MyBB Forum plugin Timeline version 1.0 is vulnerable to XSS(Cross site Scripting) and CSRF(Cross Site Request Forgery) attacks.
Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS Exploit
Oracle Business Intelligence Enterprise Edition version 11.1.1.7.140715 is vulnerable to a stored cross site scripting exploit.
