:: Deepquest ::

Comodo KORUGAN LITE version 1.6.5.1024 suffers from a cross site scripting vulnerability.

SIDU version 6.0 suffers from a cross site scripting vulnerability.

Comodo KORUGAN VM version 1.9.3.1100 suffers from a cross site scripting vulnerability.

NUUO CMS suffers from directory traversal, predictable session token, unauthenticated remote code execution, and various other vulnerabilities. Multiple metasploit modules included and various versions are affected by the various vulnerabilities.

Microsoft Windows VCF or Contact file URL manipulation arbitrary code execution proof of concept exploit. Tested on Windows 7 SP1, 8.1, 10 v.1809 with full patches up to January 2019. Both x86 and x64 architectures were tested.

ManageEngine OpManager version 12.3 suffers from a weak permissions issue in which an attacker can replace the service binary with a binary of his choice. This service runs as Localsystem thus allowing for a privilege escalation vector.

This detailed research paper discusses a multitude of security issues with STMicroelectronics DVB chipsets including, but not limited to credential leakage, buffer overflow, and data leaks.

PLC Wireless Router GPN2.4P21-C-CN suffers from an incorrect access control vulnerability.

PLC Wireless Router GPN2.4P21-C-CN suffers from a cross site request forgery vulnerability.