:: Deepquest ::

FsPro Labs Event Log Explorer version 4.6.1.2115 suffers from an XML external entity injection vulnerability.

An out-of-band resource load issue was discovered on Xiaomi MIWiFi Xiaomi_55DD version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name (containing a random string) is used in the HTTP Host header, the application […]

This archive contains all of the 201 exploits added to Packet Storm in August, 2018.

Microsoft Windows Explorer Out-of-Bound Read – Denial of Service (PoC)

Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)

FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection

Online Quiz Maker 1.0 – ‘catid’ SQL Injection

Trend Micro Virtual Mobile Infrastructure 5.5.1336 – ‘Server address’ Denial of Service (PoC)

Symantec Mobile Encryption for iPhone 2.1.0 – ‘Server’ Denial of Service (PoC)

VSAXESS V2.6.2.70 build20171226_053 – ‘Nickname’ Denial of Service (PoC)