>> ARCHIVE: 2016-09

VenShop System 2010 suffers from a database disclosure vulnerability.

Pop Under Ads Network version 1.0 discloses MySQL credentials in html source code.

Joomla Event Booking component version 2.10.1 suffers from a remote SQL injection vulnerability.

u5 CMS version 5.1.4 suffers from an open redirection vulnerability.

Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates. Additionally, they suffer from a cross site request forgery vulnerability that allows an attacker to…

Macro Expert version 4.0 suffers from multiple privilege escalation vulnerabilities.

Iperius Remote version 1.7.0 suffers from an unquoted service path privilege escalation vulnerability.

MSI NTIOLib.sys and WinIO.sys suffers from a local privilege escalation vulnerability.