>> ARCHIVE: 2018-04

WSO2 Identity Sever version 5.3.0 suffers from multiple persistent cross site scripting vulnerabilities.

Zyxel ZyWALL ZLD versions 4.30 and below suffer from a cross site scripting vulnerability.

VLC Media Player/Kodi/PopcornTime versions prior to 2.2.5 Red Chimera memory corruption proof of concept exploit.

Easy File Sharing Web Server version 7.2 UserID remote buffer overflow exploit with DEP bypass.

WordPress Woo Import Export plugin version 1.0 suffers from an arbitrary file deletion vulnerability.

Allok Video to DVD Burner version 2.6.1217 suffers from a buffer overflow vulnerability.

Open-AudIT version 2.1 suffers from a CSV macro injection vulnerability.

Monstra CMS version 3.0.4 suffers from an arbitrary folder deletion vulnerability.

nterspire Email Marketer versions prior to 6.1.6 suffer from a remote administrative authentication bypass vulnerability.

Ericsson-LG iPECS NMS version A.1Ac suffers from a cleartext credential disclosure vulnerabilities.