>> ARCHIVE: 2018-04

GoldWave version 5.70 SEH unicode local buffer overflow exploit.

CyberArk Password Vault versions prior to 9.7 and 10 suffer from a memory disclosure vulnerability.

KYOCERA Net Admin version 3.4.0906 suffers from a cross site scripting vulnerability.

KYOCERA Net Admin version 3.4.0906 suffers from a cross site request forgery vulnerability.

MyBB Recent Threads On Index plugin version 17.0 suffers from a cross site scripting vulnerability.

WolfCMS 0.8.3.1 suffers from an open redirect vulnerability.

WordPress Simple Fields plugin versions 0.2 through 0.3.5 suffer from file inclusion and remote code execution vulnerabilities.

KYOCERA Multi-Set Template Editor version 3.4.0906 suffers from an out-of-band XML external entity injection vulnerability.

The CyberArk Password Vault Web Access application uses authentication tokens which consist of serialized .NET objects. By crafting manipulated tokens, attackers are able to gain unauthenticated remote code execution on…