>> ARCHIVE: 2018-01

Disk Pulse Enterprise version 10.1.18 buffer overflow exploit that binds a shell.

RISE version 1.9 suffers from a remote SQL injection vulnerability.

PerfexCRM version 1.9.7 suffers from an arbitrary file upload vulnerability.

Kaseya VSA version 9.2 suffers from a remote shell upload vulnerability.

ImgHosting version 1.5 suffers from a cross site scripting vulnerability.

Kaseya VSA version 9.2 suffers from an authentication bypass vulnerability.

pfSense versions 2.1.3 and below suffer from a status_rrd_graph_img.php command injection vulnerability.

VTech DigiGo with firmware 83.60630 suffers from a browser overlay attack vulnerability.

Domains and Hostings Manager PRO version 3.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Oracle PeopleSoft version 8.5x suffers from a remote code execution vulnerability.