Month: March 2018

[webapps] SecurEnvoy SecurMail 9.1.501 – Multiple Vulnerabilities

[remote] MikroTik RouterOS < 6.38.4 (MIPSBE) – 'Chimay Red' Stack Clash Remote Code Execution

[local] SC 7.16 – Stack-Based Buffer Overflow

[webapps] ManageEngine Applications Manager 13.5 – Remote Code Execution (Metasploit)

[remote] DEWESoft X3 SP1 (64-bit) – Remote Command Execution

[webapps] Prisma Industriale Checkweigher PrismaWEB 1.21 – Hard-Coded Credentials

[webapps] Advantech WebAccess < 8.3 – Directory Traversal / Remote Code Execution

[webapps] TextPattern 4.6.2 – 'qty' SQL Injection

[webapps] Bacula-Web < 8.0.0-rc2 – SQL Injection