>> ARCHIVE: 2021-01

Backdoor.Win32.Zxman malware has a backdoor running on TCP/2048 that does not require any authentication.

Backdoor.Win32.Onalf malware has a backdoor running on TCP/2020 that does not require any authentication.

Online Documents Sharing Platform version 1.0 suffers from a remote SQL injection vulnerability.

Apartment Visitors Management System version 1.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.WinShell.30 malware suffers from remote stack buffer overflow and missing authentication vulnerabilities.

Nagios XI version 5.7.5 suffers from multiple persistent cross site scripting vulnerabilities.

Backdoor.Win32.Verify.f malware has backdoors running on TCP ports 1906 and 1907 that do not require any authentication.

Anchor CMS version 0.12.7 suffers from a cross site request forgery vulnerability.

Backdoor.Win32.Xel malware suffers from a remote authentication-related buffer overflow vulnerability.