:: Deepquest ::

XenForo version 2.1.0 Patch 2 suffers from a cross site scripting vulnerability.

WordPress Fancybox Lightbox plugin version 1.0.1 suffers from a persistent cross site scripting vulnerability.

Samsung Android suffers from a heap buffer overflow vulnerability and other issues in the Skia Qmage image codec.

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz’s unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.

This Metasploit module exploits an authenticated arbitrary command execution vulnerability within the ‘server’ GET parameter of the /uapi-cgi/testaction.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions <= 1.12.0.25 as well as firmware versions 1.12.13.2 and 1.12.14.5 when the 'type' GET parameter is set to 'ntp'. Successful exploitation […]

Savsoft Quiz 5 – Stored Cross-Site Scripting

Pharmacy Medical Store and Sale Point 1.0 – ‘catid’ SQL Injection

https://nsw2.go.th notified by SW1337

QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)

QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion