:: Deepquest ::

Dmitry (Deepmagic Information Gathering Tool) version 1.3a suffers from a local stack buffer overflow vulnerability.

Squirrelmail versions 1.4.22 and below suffer from a remote code execution vulnerability.

OpenText Documentum Content Server suffers from a privilege evaluation issue using crafted RPC save commands. Two proof of concepts included.

WordPress Ultimate Form Builder plugin suffers from a cross site scripting vulnerability.

Apple Webkit suffers from a universal cross site scripting vulnerability in PrototypeMap::createEmptyStructure.

This Metasploit module uses information disclosure to determine if MS17-010 has been patched or not. Specifically, it connects to the IPC$ tree and attempts a transaction on FID 0. If the status returned is “STATUS_INSUFF_SERVER_RESOURCES”, the machine does not have the MS17-010 patch. This Metasploit module does not require valid SMB credentials in default server […]

Microsoft Windows taskschd.msc local SYSTEM privilege escalation exploit.

http://samutprakan.labour.go.th/kk.htm notified by RxR

VirusChaser version 8.0 SEH buffer overflow exploit.