DEFCON 34 Recap
SRA’s highlights from DEFCON 34
Advisory: Ellucian Advance
SRA has identified a SQL injection vulnerability in Ellucian Advance Web and Legacy Advance.
From Portal to Pivot: Four CVEs in Switchvox SMB Web Application
SRA identified and disclosed several vulnerabilities in Sangoma Switchvox SMB. This post explains the technical details for each of the four CVEs.
Advisory: VSee Clinic
SRA has identified multiple vulnerabilities in VSee Clinic that can lead to unauthorized access to and deletion of files as well as exposure of SFTP credentials.
Advisory: Sangoma Switchvox SMB
SRA has identified multiple vulnerabilities in Sangoma Switchvox SMB that can lead to stored and reflected cross-site scripting (XSS), SQL injection (SQLi), remote code execution (RCE), and local file inclusion (LFI).