:: Deepquest ::

This program demonstrates how to escalate privileges using an overlayfs mount within a user namespace.

Amanda version 3.3.1 suffers from a local root privilege escalation vulnerability via the setuid runtar binary.

When you install TrendMicro Antivirus on Windows, by default a component called Password Manager is also installed and automatically launched on startup. This product is primarily written in JavaScript with node.js, and opens multiple HTTP RPC ports for handling API requests. It took about 30 seconds to spot one that permits arbitrary command execution, openUrlInDefaultBrowser, […]

SNScan 1.05 – Scan Hostname/IP Field Buffer Overflow Crash PoC

Konica Minolta FTP Utility 1.00 – CWD Command SEH Overflow

KeePass Password Safe Classic version 1.29 suffers from a denial of service vulnerability.

Dolibarr version 3.8.3 suffers from a stored cross site scripting vulnerability.

Dream Gallery version 1.0 suffers from a remote SQL injection vulnerability.

OpenBravo Hibernate suffers from a remote HQL injection vulnerability. Vendor has patched this in versions 3.0PR15Q3.4 and 3.0PR15Q4.1.

Netgear router version 1.0.0.24 with JNR1010 firmware suffers from a cross site request forgery vulnerability.