Category: Security

[webapps] Zimbra < 8.8.11 – XML External Entity Injection / Server-Side Request Forgery

[dos] Google Chrome 73.0.3683.103 – 'WasmMemoryObject::Grow' Use-After-Free

[remote] Exim 4.87 < 4.91 – (Local / Remote) Command Execution

[local] DVD X Player 5.5 Pro – Local Buffer Overflow (SEH)

[webapps] IceWarp 10.4.4 – Local File Inclusion

[remote] NUUO NVRMini 2 3.9.1 – 'sscanf' Stack Overflow

[remote] Cisco RV130W 1.0.3.44 – Remote Stack Overflow

[webapps] Zoho ManageEngine ServiceDesk Plus 9.3 – 'SiteLookup.do' Cross-Site Scripting

[local] Vim < 8.1.1365 / Neovim < 0.3.6 – Arbitrary Code Execution

[papers] [Hebrew] Digital Whisper Security Magazine #101