:: Deepquest ::

The Vulnerability Laboratory Core Research Team discovered a remote denial of service vulnerability in the official Soso Transfer mobile iOS web-application.

yTree 1.94-1.1 – Local Buffer Overflow

Timeclock Software 0.995 – Multiple SQL Iinjection Vulnerabilities

Advanced Encryption Package Buffer Overflow – DoS

An independent vulnerability laboratory researcher discovered a client-side redirect web vulnerability in the official SimpleView CRM web-application.

The Vulnerability Laboratory Research team discovered an application-side input validation web vulnerability in the official Getpdp online service web-application.

WinImage installers suffer from a DLL hijacking vulnerability.

File Hub version 3.3 suffers from script insertion and remote file upload vulnerabilities.

VMWare Zimbra Mailer Release 8.6.0.GA, latest patch and prior versions with DKIM implementation are vulnerable to longterm Mail Replay attacks. If the expiration header is not set, the signature never expires. This means, that the e-mail, perhaps caught while performing a man in the middle attack, can be replayed years after catching it.

OpenXchange versions prior to 7.8 suffer from a user folder enumeration vulnerability.