:: Deepquest ::

Emby MediaServer version 3.2.5 suffers from a password reset vulnerability.

Emby MediaServer version 3.2.5 suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the URL path filename when handling ‘not found’ errors. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user’s browser session.

Emby MediaServer version 3.2.5 suffers from a directory traversal vulnerability that allows for arbitrary file disclosure.

Joomla JGrid component version 4.44 suffers from a remote SQL injection vulnerability.

This archive contains all of the 258 exploits added to Packet Storm in April, 2017.

MySQL versions 5.6.35 and below and 5.7.17 and below suffer from an integer overflow vulnerability.

This Metasploit module exploits a type confusion vulnerability in Ghostscript that can be exploited to obtain arbitrary command execution. This vulnerability affects Ghostscript versions 9.21 and earlier and can be exploited through libraries such as ImageMagick and Pillow.

HideMyAss Pro VPN client version 2.2.7.0 for OS X suffers from a helper binary (HMAHelper) local privilege escalation vulnerability.

HideMyAss Pro VPN client version 3.3.0.3 for OS X suffers from a helper binary (com.privax.hmaprovpn.helper) local privilege escalation vulnerability.

http://paijamsin.go.th/hek.htm notified by ./cOLI