8 - 2019 - :: Deepquest ::

>> Webmin 1.920 password_change.cgi Backdoor

USER: deepcore // 2019-08-25 // 0 CMT

This Metasploit module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project’s site. Unknown…

>> Exim 4.91 Local Privilege Escalation

USER: deepcore // 2019-08-25 // 0 CMT

This Metasploit module exploits a flaw in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to command execution with root…

>> http://khaophoem.go.th/m-1.html

USER: deepcore // 2019-08-24 // 0 CMT

http://khaophoem.go.th/m-1.html notified by moncet

>> Valve Says Turning Away Researcher Was A Mistake

USER: deepcore // 2019-08-24 // 0 CMT

>> Snapforce CRM 8.3.0 Cross Site Scripting

USER: deepcore // 2019-08-24 // 0 CMT

Snapforce CRM version 8.3.0 suffers from multiple cross site scripting vulnerabilities.

>> Wikindx 5.8.2 SQL Injection

USER: deepcore // 2019-08-24 // 0 CMT

Wikindx version 5.8.2 suffers from a remote SQL injection vulnerability.

>> Endian Firewall 3.3.0 Cross Site Scripting

USER: deepcore // 2019-08-24 // 0 CMT

Endian Firewall version 3.3.0 suffers from a cross site scripting vulnerability.

>> Microsoft Windows SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

USER: deepcore // 2019-08-24 // 0 CMT

The NTFS driver supports a new FS control code to set a mount point which the existing sandbox mitigation doesn’t support allowing a sandboxed application to set an arbitrary mount…

>> http://www.djop.go.th/asifa.html

USER: deepcore // 2019-08-23 // 0 CMT

http://www.djop.go.th/asifa.html notified by ./Mar22

>> Pulse Secure SSL VPN 8.1R15.1 / 8.2 / 8.3 / 9.0 Arbitrary File Disclosure

USER: deepcore // 2019-08-23 // 0 CMT

This Metasploit module exploits Pulse Secure SSL VPN versions 8.1R15.1, 8.2, 8.3, and 9.0 which suffer from an arbitrary file disclosure vulnerability.