:: Deepquest ::

WordPress Wow Viral Signups plugin version 2.1 suffers from a remote SQL injection vulnerability.

WordPress Car Rental System plugin version 2.5 suffers from a remote SQL injection vulnerability.

WordPress KittyCatfish plugin version 2.2 suffers from a remote SQL injection vulnerability.

Revive Ad Server version 4.0.1 suffers from cross site request forgery and cross site scripting vulnerabilities.

This advisory describes a local privilege escalation via guest-account in LightDM found in Ubuntu versions 16.10 / 16.04 LTS.

This Metasploit module takes advantage of custom hg-ssh wrapper implementations that don’t adequately validate parameters passed to the hg binary, allowing users to trigger a Python Debugger session, which allows arbitrary Python code execution.

http://www.takesa2.go.th/adr.htm notified by aDriv4

http://www.dopasakonnakhon.go.th/allbumfb/1493213117.jpg notified by Ashiyane Digital Security Team

http://www.sangkho.go.th/allbumfb/1493216204.jpg notified by Ashiyane Digital Security Team

http://www.nongborlocal.go.th/allbumfb/1493216399.jpg notified by Ashiyane Digital Security Team