:: Deepquest ::

JioFi 4G M2S 1.0.2 – ‘mask’ Cross-Site Scripting

Backup Key Recovery 2.2.4 – Denial of Service (PoC)

HeidiSQL 10.1.0.5464 – Denial of Service (PoC)

Ross Video DashBoard version 8.5.1 suffers from an elevation of privileges vulnerability which can be used by a simple authenticated user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the ‘M’ flag (Modify) or ‘C’ flag (Change) for ‘Authenticated Users’ group.

Linux/x86 – Rabbit Shellcode Crypter (200 bytes)

Google Chrome 72.0.3626.121 / 74.0.3725.0 – ‘NewFixedDoubleArray’ Integer Overflow

VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation

Ease Audio Converter version 5.30 .mp4 denial of service proof of concept exploit.

Google Chrome version 73.0.3683.103 V8 JavaScript Engine out-of-memory in invalid table size denial of service proof of concept exploit.

WordPress Contact Form Builder plugin version 1.0.67 suffers from cross site request forgery and local file inclusion vulnerabilities.