:: Deepquest ::

Taskcafe version 0.1.0 and 0.1.1 suffer from a cross-origin resource sharing vulnerability.

Water Billing System version 1.0 suffers from a remote SQL injection vulnerability. This version was already found to be susceptible to SQL injection by Sarang Tumne in November of 2020.

Super Store Finder versions 3.3 and below suffer from a cross site scripting vulnerability.

Car Rental Management System version 1.0 suffers from a remote SQL injection vulnerability. This version was already found to be susceptible to SQL injection by Fortunato Lodari in November of 2020.

PMB version 5.6 suffers from a local file disclosure vulnerability.

RED-V Super Digital Signage System RXV-A740R is vulnerable to a sensitive information disclosure vulnerability. An unauthenticated attacker can visit several endpoints and disclose the webserver’s log file list containing sensitive system resources and debug log information running on the device.

Car Rental Management System version 1.0 suffers from a remote shell upload vulnerability.

Cisco 7937G suffers from denial of service and privilege escalation vulnerabilities.

MailDepot version 2033 (2.3.3022) suffers from a cross site scripting vulnerability.

SIGE versions 3.4.1 and 3.5.3 Pro suffer from cross site scripting and remote file inclusion vulnerabilities.