:: Deepquest ::

http://dopasurat.go.th/in.html notified by Pro-Team

http://nanimmigration.go.th/in.html notified by Pro-Team

ICMusic CMS version 1.x suffers from a remote SQL injection vulnerability that allows for authentication bypass.

CompMgmtLauncher fileless UAC bypass exploit.

WordPress Membership Simplified plugin version 1.58 arbitrary file download exploit.

HumHub versions 0.20.1 and 1.0.0-beta.3 suffer from a remote shell upload vulnerability.

WordPress plugins Zen App Mobile Native versions 3.0 and below, webapp-builder version 2.0, wp2android-turn-wp-site-into-android-app version 1.1.4, mobile-app-builder-by-wappress version 1.05, and mobile-friendly-app-builder-by-easytouch version 3.0 suffer from a remote shell upload vulnerability.

phplist version 3.2.6 suffers from a cross site scripting vulnerability.

HumHub versions 1.0.1 and below suffer from a cross site scripting vulnerability.

phplist version 3.2.6 suffers from a remote SQL injection vulnerability.