Roundcube Webmail: three more sanitizer bypasses enable tracking and phishingnullcathedral.com·2 pts·nullcathedral·1
Perfex CRM: Unauthenticated RCE via PHP's S: deserialization formatnullcathedral.com·1 pts·nullcathedral·1
Roundcube Webmail: SVG feImage bypasses image blocking to track email opensnullcathedral.com·175 pts·nullcathedral·75