Category: Security

[webapps] IceWarp Mail Server < 11.1.1 – Directory Traversal

[remote] GPON Routers – Authentication Bypass / Command Injection

[remote] xdebug – Unauthenticated OS Command Execution (Metasploit)

[remote] Metasploit msfd – Remote Code Execution (Metasploit)

[dos] WebKit – 'WebCore::jsElementScrollHeightGetter' Use-After-Free

[remote] Metasploit msfd – Remote Code Execution via Browser (Metasploit)

[webapps] Cockpit CMS 0.4.4-0.5.5 – Server-Side Request Forgery

[local] Easy MPEG to DVD Burner 1.7.11 – SEH Local Buffer Overflow

[remote] Exim < 4.90.1 – base64d Remote Code Execution

[local] LibreOffice/Open Office – '.odt' Information Disclosure