:: Deepquest ::

http://aec.onab.go.th/king.htm notified by RxR

flux-setup.exe from f.lux suffers from a dll hijacking vulnerability.

Irfan View version 4.42 suffers from multiple crash vulnerabilities.

An attacker can trigger an XML Entity Expansion or XML External Entity Injection. This causes the entire machine to become unresponsive until the process is terminated manually. An attacker can use this flaw to perform a denial-of-service (DoS) attack. SAP NetWeaver AS JAVA version 7.4 is affected.

SAP xMII version 15 suffers from a cross site scripting vulnerability.

Joomla Zh GoogleMap component version 8.1.2.0 suffers from a remote blind SQL injection vulnerability.

Joomla Guru Pro component suffers from a remote SQL injection vulnerability.

http://dnfe5.nfe.go.th/test.html notified by Persian Hack Team

http://strategy.pro.moph.go.th/h1n1.php notified by HUNT3RXM

http://wchealth.pro.moph.go.th/h1n1.php notified by HUNT3RXM