:: Deepquest ::

Zoho ManageEngine version 13 (13790 build) suffers from file read, file deletion, and cross site scripting vulnerabilities.

Microsoft Windows – ‘dnslint.exe’ Drive-By Download

Davolink DVW 3200 Router – Password Disclosure

File Upload Restrictions Bypass

NUUO NVRmini – ‘upgrade_handle.php’ Remote Command Execution

Splinterware System Scheduler Pro 5.12 – Buffer Overflow (SEH)

Two vulnerabilities were discovered within the Oracle WebLogic SAML service provider authentication mechanism. By inserting an XML comment into the SAML NameID tag, an attacker can coerce the SAML service provider to log in as another user. Additionally, WebLogic does not require signed SAML assertions in the default configuration. By omitting the signature portions from […]

Microsoft’s dnslint.exe tool does not verify domain names when parsing DNS text-files using the “/ql” switch making it prone to forced drive-by downloads, providing an end user is tricked into using a server text-file containing a script/binary reference instead of a normally expected domain name.

Secunia Research has discovered multiple vulnerabilities in LibRaw, which can be exploited by malicious people to cause a DoS (Denial of Service). An integer overflow error within the “parse_qt()” function (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file. An integer overflow error within the “identify()” function (internal/dcraw_common.cpp) […]

GeoVision GV-SNVR0811 – Directory Traversal