:: Deepquest ::

A denial of service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.

Jiofi 4 (JMR 1140) with firmware version Amtel_JMR1140_R12.07 suffers from a cross site scripting vulnerability.

Jiofi 4 (JMR 1140) with firmware version Amtel_JMR1140_R12.07 suffers from a WiFi password disclosure cross site request forgery vulnerability.

Jiofi 4 (JMR 1140) with firmware version Amtel_JMR1140_R12.07 suffers from an admin token disclosure cross site request forgery vulnerability.

Rukovoditel Project Management CRM version 2.4.1 suffers from a cross site scripting vulnerability.

NetworkSleuth version 3.0 suffers from a denial of service vulnerability.

PilusCart version 1.4.1 suffers from a remote SQL injection vulnerability.

ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (DoS)

MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)

WordPress Plugin Booking Calendar 8.4.3 – Authenticated SQL Injection