:: Deepquest ::

Clinic Pro version 4 suffers from a remote SQL injection vulnerability.

This Metasploit module exploits a command injection vulnerability in TeemIp versions prior to 2.4.0. The “new_config” parameter of “exec.php” allows you to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server. The vulnerability can be exploited by an […]

Apache versions 2.4.17 through 2.4.38 suffer from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call.

Chrome version 73.0.3683.86 stable exploit for chromium issue 941743, tested on Windows 10 x64, which leverages a flaw in the V8 javascript engine.

WordPress 5.0.0 – Crop-image Shell Upload (Metasploit)

WordPress Plugin Contact Form Maker 1.13.1 – Cross-Site Request Forgery

AIDA64 Extreme 5.99.4900 – ‘Logging’ SEH Buffer Overflow

Manage Engine ServiceDesk Plus 9.3 – Privilege Escalation

FreeSMS 2.1.2 – SQL Injection (Authentication Bypass)

AIDA64 Engineer 5.99.4900 – ‘Load from file’ Field Buffer Overflow (SEH)