:: Deepquest ::

http://waengcity.go.th/x.txt notified by chinafans

NetGain Enterprise Manager versions 7.2.562 build 853 and below suffer from a ping command injection vulnerability.

Joomla Abstract component version 2.1 suffers from a remote SQL injection vulnerability.

Joomla StreetGuessr Game component version 1.0 suffers from a remote SQL injection vulnerability.

Joomla Guesser component version 1.0.4 suffers from a remote SQL injection vulnerability.

Joomla Recipe Manager component version 2.2 suffers from a remote SQL injection vulnerability.

pfSense version 2.3.2 suffers from cross site request forgery and cross site scripting vulnerabilities that can assist in gaining a reverse-shell remotely as root.

Ektron versions 8.5, 8.7 equal to and below sp1, and 9.0 before sp1 have vulnerabilities in various operations within the ServerControlWS.asmxweb services. These vulnerabilities allow for remote code execution without authentication and execute in the context of IIS on the remote system.

http://www.sikhoraphumcity.go.th notified by Mr.DreamX196

WordPress Adminer plugin version 1.4.4 suffers from an interface exposure issue.