:: Deepquest ::

Jinfornet Jreport version 15.6 suffers from an unauthenticated directory traversal vulnerability.

Everest version 5.50.2100 suffers from a denial of service vulnerability.

ECK Hotel version 1.0 suffers from a cross site request forgery vulnerability.

Centreo version 19.10.8 suffers from a DisplayServiceStatus remote code execution vulnerability.

TP-Link Archer C50 V3 devices before build 200318 release 62209 allow remote attackers to cause a denial of service condition via a crafted HTTP Header containing an unexpected Referer field.

Linux kernel versions starting at 4.10 and below 5.1.7 PTRACE_TRACEME local root exploit that uses the pkexec technique.

This Metasploit module exploits a vulnerability within SharePoint and its .NET backend that allows an attacker to execute commands using specially crafted XOML data sent to SharePoint via the Workflows functionality.

Everest 5.50.2100 – ‘Open File’ Denial of Service (PoC)

Easy RM to MP3 Converter 2.7.3.700 – ‘Input’ Local Buffer Overflow (SEH)

ECK Hotel 1.0 – Cross-Site Request Forgery (Add Admin)