Tileserver-gl version 3.0.0 suffers from a cross site scripting vulnerability.

Horde Groupware Webmail version 5.2.22 suffers from a persistent cross site scripting vulnerability.

htmly version 2.8.0 suffers from a persistent cross site scripting vulnerability.

Backdoor.Win32.Zombam.h malware suffers from a buffer overflow vulnerability.

This Metasploit module exploits a command injection vulnerability in the /admin/monitoringplugins.php page of Nagios XI versions prior to 5.8.0 when uploading plugins. Successful exploitation allows an authenticated admin user to…