>> ARCHIVE: 2019-12

AVS Audio Converter version 9.1.2.600 stack overflow proof of concept exploit.

FTP Navigator version 8.03 stack overflow SEH proof of concept exploit.

Cera Intranet Community Theme version 1.0.1 suffers from a remote SQL injection vulnerability.

elearning-script version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Wave version 2.0 suffers from a remote SQL injection vulnerability.

RICOH SP 4510SF Printer suffers from an html injection vulnerability.

Wing FTP Server version 6.0.7 suffers from an unquoted service path vulnerability.

Heatmiser Netmonitor version 3.03 suffers from a hardcoded credential vulnerability.

WEMS Enterprise Manager version 2.58 suffers from a cross site scripting vulnerability.

WEMS BEMS version 21.3.1 has an undocumented backdoor account that is Base64 encoded. These sets of credentials are never exposed to the end-user and cannot be changed through any normal…