:: Deepquest ::

ZKTeco ZKBioSecurity version 3.0.1.0_R_230 suffers from a cross site request forgery vulnerability.

ZKTeco ZKBioSecurity version 3.0.1.0_R_230 suffers from a file path manipulation vulnerability.

ZKTeco ZKBioSecurity version 3.0.1.0_R_230 suffers from a local authorization bypass vulnerability in visLogin.jsp.

ZKTeco ZKAccess Security System version 5.3.1 suffers from a persistent cross site scripting vulnerability.

ZKTeco ZKBioSecurity version 3.0.1.0_R_230 suffers from a user enumeration weakness vulnerability.

CryptWare CryptoPro Secure Disk for Bitlocker version 5.1.0.6474 suffers from flaws that allows a malicious party to attack the boot process and backdoor the system to steal login credentials, the private 802.1x certificate, and the associated password.

PHP version 5.0.0 suffers from imap_mail(), hw_docbyanchor(), html_doc_file(), snmpset(), snmprealwalk(), snmpwalk(), fbird_[p]connect(), and snmpwalkoid() denial of service vulnerabilities.

PHP version 7.0 suffers from AppendIterator::append and JsonSerializable::jsonSerialize denial of service vulnerabilities.

This archive contains all of the 235 exploits added to Packet Storm in August, 2016.

http://do1.hss.moph.go.th/env/build1.php?id=1 notified by RED DEVILS