:: Deepquest ::

http://www.mhkpeo.go.th/menu-1.html notified by KATENBAD

WordPress (core) 4.6 suffers from an unauthenticated remote code execution condition via an exploitable version of PHPMailer built-in to WordPress code. Exploitation details provided.

http://www.huayton.go.th notified by Dr.AFN[D]ENA

Atlassian SourceTree Client version 2.5c and prior contain a client URL handler command injection vulnerability that allows attackers to execute specially crafted sourcetree:// commands with arbitrary arguments on multiple platforms.

Mura CMS version 7.0.6967 suffers from cross site scripting vulnerabilities.

Microsoft Internet Explorer 11 suffers from a CMarkup::DestroySplayTree use-after-free vulnerability.

Zenario version 7.6 suffers from a delete persistent cross site scripting vulnerability.

Zenario version 7.6 suffers from a persistent cross site scripting vulnerability.

Icecream versions 4.53 and Pro suffer from a file permission privilege escalation vulnerability.

Super File Explorer version 1.0.1 suffers from a remote file upload vulnerability.