:: Deepquest ::

10-Strike Bandwidth Monitor version 3.7 suffers from a buffer overflow vulnerability.

Inteno’s IOPSYS suffers from an authenticated local privilege escalation vulnerability.

10-Strike LANState version 8.8 suffers from a buffer overflow vulnerability.

WordPress Snazzy Maps plugin versions 1.1.3 and below suffer from a cross site scripting vulnerability.

CleanMyMac3 suffers from a local privilege escalation vulnerability.

Core FTP version 2.0 XRMD denial of service proof of concept exploit.

There is a heap overflow in Skia when drawing paths with anti-aliasing turned off. This issue can be triggered in both Google Chrome and Mozilla Firefox by rendering a specially crafted SVG image. Proof of concepts included.

Trivum Multiroom Setup Tool version 8.76 suffers from a cross site request forgery vulnerability.

This Metasploit module exploits an authentication bypass in .srv functionality and a command injection in parhand to execute code as the root user.

FTPShell Client version 5.22 suffers from a remote buffer overflow vulnerability.