>> ARCHIVE: 2016-01

Microsoft IExpress suffers from a DLL hijacking vulnerability.

Telisca IPS Lock 2 suffers from an unauthenticated phone unlocking vulnerability. Metasploit module included.

ManageEngine Application Manager 12 suffers from cross site request forgery, privilege escalation, and cross site scripting vulnerabilities.

ManageEngine Application Manager version 12.5 remote command execution exploit.

Bitrix mcart.xls module versions 6.5.2 and below suffer from a remote SQL injection vulnerability.

WhatsUp Gold version 16.3 suffers from an unauthenticated remote code execution vulnerability.

SevOne NMS versions 4.3.6.0 and below remote root exploit.

Roundcube version 1.1.3 suffers from a path traversal vulnerability.

dbsudio version R1 2.14.4 and DNS-SD version 379.32.2 suffer from an unquoted search path issue impacting the service ‘dbaudio DNS-SD’ for Windows deployed as part of dbaudio R1. This could…