Pages regarding Liferay's security are linked through here.
Please do not post zero-day exploits here. Instead, email possible security threats to security@liferay.com.