:: Deepquest ::

DNSTracer version 1.8.1 suffers from a buffer overflow vulnerability.

BIND version 9.10.5 for x86 and x64 on Windows suffers from an unquoted service path vulnerability that can allow for privilege escalation.

Peplink version 7.0.0-build1904 suffers from cross site request forgery, cross site scripting, file deletion, and remote SQL injection vulnerabilities.

Parallels Desktop version 12.2.0 and below suffer from a vulnerability that allows remote file sharing to be leveraged against the host operating system for arbitrary code execution.

http://mekhala.dwr.go.th/69.gif notified by Ninja Hattori

reiserfstune version 3.6.25 suffers from a local buffer overflow vulnerability.

Samba versions 3.5.0 through 4.4.14, 4.5.10, and 4.6.4 is_known_pipename() remote code execution exploit.

WordPress Tribulant Newsletters plugin versions 4.6.4.2 and below suffer from cross site scripting and file disclosure vulnerabilities.

WordPress No External Links plugin versions 3.5.17 and below suffer from a cross site scripting vulnerability.

Sudo’s get_process_ttyname() on Linux suffers from a race condition that allows for root privilege escalation.