Stories by nullcathedral

Roundcube Webmail: three more sanitizer bypasses enable tracking and phishing

Perfex CRM: Unauthenticated RCE via PHP's S: deserialization format

Roundcube Webmail: SVG feImage bypasses image blocking to track email opens