>> ARCHIVE: 2016-08

tcPBX suffers from a remote file disclosure vulnerability.

C2S types IRDOME-II-C2S, IRBOX-II-C2S, and DVR suffer from remote credential disclosure and authentication bypass vulnerabilities.

JVC IP-Camera version VN-T216VPRU suffers from a remote credential disclosure vulnerability.

Vanderbilt IP-Camera versions CCPW3025-IR and CVMW3025-IR suffer from a remote credential disclosure vulnerability.

This exploit demonstrates an authentication bypass on multiple MESSOA IP cameras that can change the admin username and password.

WordPress version 4.5.3 suffers from a path traversal vulnerability in the core ajax handlers.

Sakai version 10.7 suffers from cross site scripting and local file inclusion vulnerabilities.

Newtec Satellite Modem version MDM6000 2.2.5 suffers from a cross site scripting vulnerability.