>> ARCHIVE: 2021-01

Gotenberg versions 6.2.0 and below suffer from directory traversal, code execution, and insecure permission vulnerabilities.

Trojan.Win32.Antavka.bz malware suffers from an insecure permissions vulnerability that can allow for privilege escalation.

Win32 backdoor 2019-02-ARTRADOWNLOADER suffers from a remote SEH buffer overflow vulnerability.

Mantis Bug Tracker version 2.24.3 suffers from a remote SQL injection vulnerability.

Resumes Management and Job Application Website version 1.0 suffers from a remote shell upload vulnerability.

Backdoor.Win32.Infexor.b malware suffers from a remote SEH stack buffer overflow vulnerability.

Trojan.Win32.Barjac malware suffers from a remote stack buffer overflow vulnerability.

Curfew e-Pass Management version 1.0 suffers from a persistent cross site scripting vulnerability.

Knockpy version 4.1.1 suffers from a CSV injection vulnerability.

Trojan.Win32.Bayrob.cgau malware suffers from an insecure permissions vulnerability that can allow for privilege escalation.