12 - 2019 - :: Deepquest ::

>> Microsoft Excel 2016 1901 Import Error XML Injection

USER: deepcore // 2019-12-01 // 0 CMT

Microsoft Excel 2016 version 1901 suffers from an XML external entity injection vulnerability.

>> Carlo Gavazzi SmartHouse 6.5.33 XSS / Cross Site Request Forgery

USER: deepcore // 2019-12-01 // 0 CMT

Carlo Gavazzi SmartHouse version 6.5.33 suffers from cross site request forgery along with both reflective and persistent cross site scripting vulnerabilities.