>> ARCHIVE: 2020-06

MJML versions 4.6.2 and below suffer from a path traversal vulnerability.

SOS JobScheduler version 1.13.3 encrypts a secret by simply using the name of a profile as the key, making it trivial to decrypt.

Gila CMS version 1.11.8 suffers from a remote SQL injection vulnerability.

TP-LINK Cloud Cameras NCXXX suffer from a DelMultiUser stack overflow vulnerability.

Netgear R7000 router remote code execution exploit that leverages a pre-authentication memcpy-based stack buffer overflow vulnerability.

This Metasploit module takes advantage of a poorly configured TACACS+ config, Arista’s bash shell, and a TACACS+ read-only account to achieve privilege escalation.

This Metasploit module exploits a remote command execution vulnerability in Zivif webcams. This is known to impact versions prior to and including 2.3.4.2103.