:: Deepquest ::

AVE DOMINAplus versions 1.10.x and below suffer from cross site request forgery and cross site scripting vulnerabilities.

AVE DOMINAplus versions 1.10.x and below suffer from an unauthenticated remote reboot vulnerability.

AVE DOMINAplus versions 1.10.x and below suffer from an authentication bypass vulnerability.

AVE DOMINAplus versions 1.10.x and below suffer from a credential disclosure vulnerability.

This Metasploit module exploits a vulnerability in the OpenBSD ld.so dynamic loader (CVE-2019-19726). The _dl_getenv() function fails to reset the LD_LIBRARY_PATH environment variable when set with approximately ARG_MAX colons. This can be abused to load libutil.so from an untrusted path, using LD_LIBRARY_PATH in combination with the chpass set-uid executable, resulting in privileged code execution. This […]

http://www.reo15.moe.go.th/web/ notified by Family Attack Cyber

Prime95 version 29.8 build 6 SEH buffer overflow exploit.

Microsoft Windows 10 BasicRender.sys denial of service proof of concept exploit.

phpMyChat-Plus version 1.98 suffers from a cross site scripting vulnerability.

FreeSWITCH version 1.10.1 suffers from a command execution vulnerability.