11 - 2016 - :: Deepquest ::

[EXPLOIT]

>> Teradata Studio Express 15.12.00.00 Race Condition

USER: deepcore // 2016-11-20 // 0 CMT

Teradata Studio Express version 15.12.00.00 suffers from a /tmp race condition.

[EXPLOIT]

>> Habari CMS 0.9.2 Cross Site Scripting

USER: deepcore // 2016-11-20 // 0 CMT

Habari CMS version 0.9.2 suffers from a cross site scripting vulnerability.

[EXPLOIT]

>> Huawei Flybox B660 3G/4G Router Authentication Bypass

USER: deepcore // 2016-11-20 // 0 CMT

Huawei Flybox B660 3G/4G router suffers from an authentication bypass vulnerability.

[EXPLOIT]

>> Microsoft Internet Explorer 11 iertutil LCIEGetTypedComponentFromThread Use-After-Free

USER: deepcore // 2016-11-20 // 0 CMT

A specially crafted web-page can cause the iertutil.dll module of Microsoft Internet Explorer 11 to free some memory while it still holds a reference to this memory. The module can…

[EXPLOIT]

>> Palo Alto Networks PanOS root_trace Privilege Escalation

USER: deepcore // 2016-11-20 // 0 CMT

Palo Alto Networks PanOS suffers from a root_trace local privilege escalation vulnerability.

[EXPLOIT]

>> Palo Alto Networks PanOS root_reboot Privilege Escalation

USER: deepcore // 2016-11-20 // 0 CMT

Palo Alto Networks PanOS suffers from a root_reboot local privilege escalation vulnerability.

[EXPLOIT]

>> Microsoft Edge CTextExtractor::GetBlockText Out-Of-Bounds Read

USER: deepcore // 2016-11-20 // 0 CMT

A specially crafted web-page can cause an integer underflow in Microsoft Edge. This causes CTextExtractor::GetBlockText to read data outside of the bounds of a memory block.