:: Deepquest ::

WebKit JSC has an issue where reifyStaticProperty needs to set the PropertyAttribute::CustomAccessor flag for CustomGetterSetter.

MatrixSSL suffers from a stack buffer overflow vulnerability when verifying x.509 certificates.

The Nuuo Central Management Server allows an authenticated user to query the state of the alarms. This functionality can be abused to inject SQL into the query. As SQL Server 2005 Express is installed by default, xp_cmdshell can be enabled and abused to achieve code execution. This module will either use a provided session number […]

Teracue ENC-400 – Command Injection / Missing Authentication

Quest NetVault Backup Server < 11.4.5 – Process Manager Service SQL Injection / Remote Code Execution

Micro Focus Filr 3.4.0.217 – Path Traversal / Local Privilege Escalation

Nuuo Central Management – Authenticated SQL Server SQL Injection (Metasploit)

WebKit JSC – reifyStaticProperty Needs to set the PropertyAttribute::CustomAccessor flag for CustomGetterSetter

Protecting Windows Privilege Accounts

HotelDruid version 2.3 suffers from a cross site scripting vulnerability.