:: Deepquest ::

HBGK DVR version 3.0.0 build 20161206 suffers from an authentication bypass vulnerability.

Microsoft Office 2007 Word suffers from an information disclosure vulnerability.

Microsoft Excel contains a remote code execution vulnerability upon processing OLE objects. Versions 2007, 2010, 2013, and 2016 are affected on both architectures.

Microsoft Office 2007 Groove contains a security bypass issue regarding ‘Workspace Shortcut’ files (.GLK) because it allows arbitrary (registered) URL Protocols to be passed, when only ‘grooveTelespace://’ URLs should be allowed, which allows execution of arbitrary code upon opening a ‘GLK’ file.

Mac OS X contains a vulnerability that allows the bypass of the Apple Quarantine and the execution of arbitrary Javascript code without restrictions.

http://www.maekhaning.go.th notified by ErrOr SquaD

http://www.nongyai-sao.go.th notified by ErrOr SquaD

http://www.makluamai.go.th/index.html notified by ErrOr SquaD

http://www.sri-satuk.go.th/index.html notified by ErrOr SquaD

http://www.thamaunglocal.go.th notified by ErrOr SquaD