>> ARCHIVE: 2020-07

Daily Expense Tracker version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Plexus anblick Digital Signage Management version 3.1.13 suffers from an open redirection vulnerability.

Employee Record Management System version 1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Company Visitor Management System (CVMS) version 1.0 suffers from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass.

UBICOD Medivision Digital Signage version 1.5.1 suffers from a cross site request forgery vulnerability.

Directory Management System (DMS) version 1.0 suffers from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass.

UBICOD Medivision Digital Signage version 1.5.1 suffers from a privilege escalation vulnerability that is leveraged via authorization bypass.

There is a stack buffer overflow in usrsctp when a server processes a skipped auth block from an incoming connection. Proof of concept exploit included.

Proof of concept denial of service exploit for the SIGRed vulnerability in Microsoft Windows DNS.