Using a web browser or script server-side request forgery (SSRF) can be initiated against internal/external systems to conduct port scans by leveraging D-LINK’s MailConnect component. The MailConnect feature on D-Link…
>> ARCHIVE: 2018-11
D-Link Central WiFiManager CWM-100 version 1.03 r0098 devices will load a trojan horse “quserex.dll” and will create a new thread running with SYSTEM integrity.
http://leamsingha.go.th/king.txt notified by ErrOr SquaD
http://chanmunic.go.th/king.txt notified by ErrOr SquaD
http://www.kakoh.go.th/imggallery notified by Yacine_Dexter
http://ictg.onwr.go.th/layouts/ notified by Ayyıldız Tim
http://flood.correct.go.th notified by Ayyıldız Tim
Linux/x64 – Bind TCP (4444/TCP) Shell (/bin/sh) + Password (1234567) Shellcode (136 bytes)
eToolz version 3.4.8.0 suffers from a denial of service vulnerability.
VSAXESS version 2.6.2.70 build 20171226_053 suffers from an organization field denial of service vulnerability.