Emanuel Duss and Sylvain Heiniger identified multiple vulnerabilities in the OpenVPN status monitor software openvpn-monitor.

Emanuel Duss identified a biometric authentication bypass vulnerability in the Ionic Identity Vault secure storage solution on Android.

Philipp Mao identified a hardcoded credentials vulnerability in the electronic time recording system timeCard

Emanuele Barbeno identified a vulnerability in the open source software NeDi.

Stephan Sekula identified an XSS vulnerability in the report generation tool Canopy.

Alex Joss and Emanuele Barbeno identified vulnerabilities in Intland Software´s Application-Lifecycle-Management codeBeamer.

Tino Kautschke identified an XSS vulnerability in the content management system Plone.

Sylvain Heiniger and Alex Joss identified vulnerabilities in Avaya Equinox® Conferencing, an all-inclusive solution for voice, video and desktop…

Nicolas Heiniger identified a OS Command Injection (RCE) in WorkCentre 78XX Series.

Philipp Mao identified an XML External Entity vulnerability in the FusionAuth SAML Library.

Emanuele Barbeno identified a Privilege Escalation vulnerability in Pi-hole.

Emanuele Barbeno identified an XXE vulnerability in Helix ALM, the application lifecycle management tool by Perforce.