Jul 7, 2025

Started

• ClosedCritical✓Patched

  Looking Glass Multi-Router Looking Glass (MRLG): Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

  Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption. Added to CISA KEV on 2025-07-07.

  Looking Glass Multi-Router Looking Glass (MRLG)·Closed Jul 7, 2025·updated Jul 7, 2025

• ClosedCritical✓Patched

  PHPMailer: PHPMailer Command Injection Vulnerability

  PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition. Added to CISA KEV on 2025-07-07.

  PHPMailer·Closed Jul 7, 2025·updated Jul 7, 2025

• ClosedHigh✓Patched

  Rails Ruby on Rails: Ruby on Rails Path Traversal Vulnerability

  Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents. Added to CISA KEV on 2025-07-07.

  Rails Ruby on Rails·Closed Jul 7, 2025·updated Jul 7, 2025

• ClosedHigh✓Patched

  Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

  Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. Added to CISA KEV on 2025-07-07.

  Synacor Zimbra Collaboration Suite (ZCS)·Closed Jul 7, 2025·updated Jul 7, 2025