:: Deepquest ::

Ajera Timesheets versions 9.10.16 and below suffer from a vulnerability where it performs deserialization of untrusted data.

Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063 suffers from a cross site request forgery vulnerability.

Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063 suffers from a stored cross site scripting vulnerability. The issue is triggered via unrestricted file upload while restoring a config file allowing the attacker to upload an html or javascript file that will be stored in /settings/poc.html. This can be exploited to execute arbitrary HTML or JS code in […]

Wireshark – ‘get_t61_string’ Heap Out-of-Bounds Read

CF Image Hosting Script 1.6.5 – (Delete all Pictures) Privilege Escalation

http://nakha.udonthani.police.go.th/k3t.html notified by KURD ELECTRONIC TEAM

http://www.scdc8.forensic.police.go.th/inform08/k3t.html notified by KURD ELECTRONIC TEAM

phpMoAdmin MongoDB GUI 1.1.5 – Cross-Site Request Forgery / Cross-Site Scripting

PLC Wireless Router GPN2.4P21-C-CN – Cross-Site Scripting

LayerBB 1.1.1 – Persistent Cross-Site Scripting