AVS Audio Converter 9.1.2.600 Stack Overflow

AVS Audio Converter version 9.1.2.600 stack overflow proof of concept exploit.

FTP Navigator 8.03 Stack Overflow

FTP Navigator version 8.03 stack overflow SEH proof of concept exploit.

Cera Intranet Community Theme 1.0.1 SQL Injection

Cera Intranet Community Theme version 1.0.1 suffers from a remote SQL injection vulnerability.

elearning-script 1.0 SQL Injection

elearning-script version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Wave 2.0 SQL Injection

Wave version 2.0 suffers from a remote SQL injection vulnerability.

RICOH SP 4510SF Printer HTML Injection

RICOH SP 4510SF Printer suffers from an html injection vulnerability.

Wing FTP Server 6.0.7 Unquoted Service Path

Wing FTP Server version 6.0.7 suffers from an unquoted service path vulnerability.

Heatmiser Netmonitor 3.03 Hardcoded Credentials

Heatmiser Netmonitor version 3.03 suffers from a hardcoded credential vulnerability.

WEMS Enterprise Manager 2.58 Cross Site Scripting

WEMS Enterprise Manager version 2.58 suffers from a cross site scripting vulnerability.

WEMS BEMS 21.3.1 Undocumented Backdoor Account

WEMS BEMS version 21.3.1 has an undocumented backdoor account that is Base64 encoded. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the controller thru the RMI.