>> AUTHOR: deepcore

ImpressCMS versions 1.4.2 and below suffer from an authentication bypass vulnerability.

Sysax FTP Automation version 6.9.0 suffers from a privilege escalation vulnerability.

Backdoor.Win32.Agent.bxxn malware suffers from an open proxy vulnerability.

iRZ mobile routers versions RU21, RU21w, RL21, RU41, and RL01 suffer from a cross site request forgery vulnerability that can enable remote code execution.

Backdoor.Win32.BirdSpy.b malware suffers from a hardcoded credential vulnerability.

ImpressCMS versions 1.4.2 and below suffer from a path traversal vulnerability that can allow for arbitrary file deletion.

ICEHRM version 31.0.0.0S suffers from a cross site request forgery vulnerability.

ImpressCMS versions 1.4.2 and below suffer from an incorrect access control vulnerability.

ImpressCMS versions 1.4.3 and below suffer from a remote SQL injection vulnerability.