:: Deepquest ::

Glassfish Server – Arbitrary File Read Vulnerability

An independent vulnerability laboratory research group discovered a sql injection web vulnerability in the official WebMartIndia Content Management System (2016-Q1).

smod is a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest the modbus protocol. It is a full modbus protocol implementation using Python and Scapy. This software can be run on Linux/OSX under python 2.7.x.

XMB – eXtreme Message Board version 1.9.11.13 suffers from weak crypto and insecure password storage vulnerabilities.

ZyXel WAP3205 suffers from multiple cross site scripting vulnerabilities.

Buffalo NAS devices suffer from a remote shutdown / denial of service vulnerability.

FreeBSD suffers from an SCTP ICMPv6 error processing denial of service vulnerability.

The Linux prima WLAN driver suffers from a heap overflow vulnerability.

pfSense Firewall version 2.2.5 cross site request forgery exploit.

This Metasploit module writes and spawns a native payload on an android device that is listening for adb debug messages.