:: Deepquest ::

Serv-U FTP Server version 15.1.7 suffers from a persistent cross site scripting vulnerability.

Serv-U FTP Server version 15.1.7 suffers from a CSV injection vulnerability.

Control Web Panel versions 0.9.8.856 through 0.9.8.864 suffer from a phpMyAdmin password disclosure vulnerability.

Microsoft Teams Instant Messenger application on Windows 7 SP1 fully patched is vulnerable to remote DLL hijacking.

This Metasploit module writes an execution trigger to the target’s Bash profile. The execution trigger executes a call back payload whenever the target user opens a Bash terminal. A handler is not run automatically, so you must configure an appropriate exploit/multi/handler to receive the callback.

Apple Security Advisory 2019-12-10-1 – iOS 13.3 and iPadOS 13.3 is now available and addresses code execution and information leakage vulnerabilities.

NopCommerce 4.2.0 – Privilege Escalation

Netgear R6400 – Remote Code Execution

Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

https://www.sme.go.th/readme.htm notified by Dijehaji