:: Deepquest ::

http://nanokkok.go.th/doc_news notified by N3X0000S

http://www.mnst.go.th notified by bocahXploit

VenShop System 2010 suffers from a database disclosure vulnerability.

Pop Under Ads Network version 1.0 discloses MySQL credentials in html source code.

Joomla Event Booking component version 2.10.1 suffers from a remote SQL injection vulnerability.

u5 CMS version 5.1.4 suffers from an open redirection vulnerability.

Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates. Additionally, they suffer from a cross site request forgery vulnerability that allows an attacker to commit such a firmware update.

Macro Expert version 4.0 suffers from multiple privilege escalation vulnerabilities.

Iperius Remote version 1.7.0 suffers from an unquoted service path privilege escalation vulnerability.

MSI NTIOLib.sys and WinIO.sys suffers from a local privilege escalation vulnerability.