:: Deepquest ::

GTA Firewall GB-OS version 6.2.02 suffers from a local malicious script insertion vulnerability.

ManageEngine Firewall Analyzer version 8.5 SP-5.0 suffers from multiple cross site scripting vulnerabilities.

Ubiquiti Networks UniFi version 3.2.10 suffers from a cross site request forgery vulnerability.

A crash can occurs due to a heap-based buffer overflow in the ASAN build of Wireshark (current git master), by feeding a malformed file to tshark.

In certain kernel versions it is possible to use the AIO subsystem (io_submit syscall) to pass size values larger than MAX_RW_COUNT to the networking subsystem’s sendmsg implementation. In the L2TP PPP sendmsg implementation, a large size parameter can lead to an integer overflow and kernel heap corruption during socket buffer allocation. This could be exploited […]

Magento versions 1.9.2.2 and below suffer from an information disclosure vulnerability in their RSS feed.

Dell OpenManage Server Administrator 8.2 – Authenticated Directory Traversal

IBM Lotus Domino <= R8 Password Hash Extraction Exploit

The Vulnerability Laboratory Research Team discovered an application-side input validation web vulnerability in the official GTA Web Firewall appliance – GB OS v6.2.02.