:: Deepquest ::

Apache Tika Server versions prior to 1.18 suffer from a command injection vulnerability.

ntopng version 3.8.190307 Community Edition suffers from a cross site scripting vulnerability.

Intel Modular Server System version 10.18 cross site request forgery change administrative password exploit.

Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution

Intel Modular Server System 10.18 – Cross-Site Request Forgery (Change Admin Password)

Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API – Remote Code Execution

FTPGetter Standard 5.97.0.177 – Remote Code Execution

CoreFTP Server FTP and SFTP Server version 2 build 674 suffer from a directory traversal vulnerability. By utilizing a directory traversal along with the FTP MDTM command, an attacker can browse outside the root directory to determine if a file exists based on return file size along with the date the file was last modified […]

WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability.

BEopt suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries (sdl2.dll and libegl.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into opening a related application file .BEopt located on a remote WebDAV or SMB share. Version 2.8.0 is affected.