:: Deepquest ::

This exploit demonstrates the remote code execution vulnerability in the Traffic Management User Interface (TMUI) in BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1.

Sony PS4 versions prior to 7.02 and FreeBSD versions 9 and 12 ip6_setpktopt kernel local privilege escalation proof of concept exploit.

Online Shopping Portal version 3.1 suffers from a remote SQL injection vulnerability.

Various CDATA OLTs suffer from backdoor access with telnet, credential leaks, shell escape with root privileges, denial of service, and weak encryption algorithm vulnerabilities.

This Metasploit module exploits a directory traversal in F5’s BIG-IP Traffic Management User Interface (TMUI) to upload a shell script and execute it as the root user.

Proof of concept exploit for ClearPass Policy Manager which suffers from an unauthenticated remote command execution vulnerability.

http://mlds.go.th/z.htm notified by Mr.L3RB1

BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)

SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)

File Management System version 1.1 suffers from a persistent cross site scripting vulnerability.