Re: LibTIFF 4.0.8 has multiple memory leak vulnerabilities (CVE-2017-16232)
https://goo.gl/jLmxQi

[KIS-2018-01] Oracle Application Express (AnyChart) Flash-based Cross-Site Scripting Vulnerability
https://goo.gl/Q5C9LT

[KIS-2018-06] SugarCRM (addLabels) PHP Code Injection Vulnerability
https://goo.gl/W3evHs

[KIS-2018-05] SugarCRM (SaveDropDown) PHP Code Injection Vulnerability
https://goo.gl/dtfPxQ

[KIS-2018-04] SugarCRM (ConnectorsController) Server-Side Request Forgery Vulnerability
https://goo.gl/P99K4U

[KIS-2018-03] SugarCRM (portal_get_related_notes) SQL Injection Vulnerability
https://goo.gl/fLXmL1

[KIS-2018-02] SugarCRM (WorkFlow module) PHP Code Injection Vulnerability
https://goo.gl/91USV8

[KIS-2018-08] SugarCRM (Web Logic Hooks module) Path Traversal Vulnerability
https://goo.gl/fC25ku

[KIS-2018-07] SugarCRM (Web Logic Hooks module) PHP Code Injection Vulnerability
https://goo.gl/jA15Rr

Chrome Browser for Android Reveals Sensitive Hardware Information
https://goo.gl/cghARU

Call for Papers for ShmooCon Epilogue Closes Jan 1
https://goo.gl/PgWz9N

Multiple Stored Cross-site Scripting Vulnerabilities in ForkCMS 5.0.6
https://goo.gl/JqzGpr

Re: [CVE-2018-18009] dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials
https://goo.gl/BCiKyJ

Re: [CVE-2018-18008] spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials
https://goo.gl/cP7GP5

Re: [CVE-2018-18007] atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials
https://goo.gl/ykvbDJ

DSA-2018-224:RSA Archer GRC Platform Improper Access Control Vulnerability
https://goo.gl/bFehnU

BMC Remedy + ITAM - multiple security issues.
https://goo.gl/GFvDdF

Open-Xchange Security Advisory 2018-12-31
https://goo.gl/3jsygX

Vulnerabilities in Zurmo 2.3.4
https://goo.gl/AAeuUP

Multiple Cross-site Scripting Vulnerabilities in ImpressCMS 1.3.10
https://goo.gl/nM1mPW

/bin/statistics in TWiki 6.0.2 allows XSS via the webs parameter(CVE-2018-20212)
https://goo.gl/2UxZNP