:: Deepquest ::

MyBB versions 1.8.12 and prior is vulnerable to a cross site scripting bug which can allow a moderator to take over an administrator’s account and upload a webshell, or perform file enumeration in the instances where it is not possible to spawn a shell.

Atlassian Confluence versions 4.3.0 through 6.1.1 suffers from an access restriction bypass vulnerability.

LG suffers from missing bounds-checking in AVI stream parsing.

LG suffers from an out-of-bounds read in CAVIFileParser::Destroy resulting in an invalid free.

LG has a memcpy in ASFParser::ParseHeaderExtensionObjects that does not check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read.

Disk Pulse version 9.7.26 suffers from an add directory local buffer overflow vulnerability.

http://ict.nst2.go.th/web1/file_editor/AmoHassan.txt notified by ashiyane digital security team

http://person.nst2.go.th/web1/file_editor/AmoHassan.txt notified by ashiyane digital security team

http://audit.nst2.go.th/web1/file_editor/AmoHassan.txt notified by ashiyane digital security team

http://general.nst2.go.th/web1/file_editor/AmoHassan.txt notified by ashiyane digital security team