:: Deepquest ::

Advanced System Care Service 13 – ‘AdvancedSystemCareService13’ Unquoted Service Path

Logitech Solar Keyboard Service – ‘L4301_Solar’ Unquoted Service Path

Anuko Time Tracker version 1.19.23.5311 suffers from an implementation flaw where the password reset link can be replayed.

Anuko Time Tracker version 1.19.23.5311 suffers from an implementation flaw where password reset emails can be continuously triggered against unsuspecting users.

ReadyTalk Avian JVM versions 1.2.0 before 27th October 2020 suffer from a FileOutputStream.write() integer overflow vulnerability.

This Metasploit module exploits an arbitrary file upload vulnerability in HorizontCMS 1.0.0-beta in order to execute arbitrary commands. The module first attempts to authenticate to HorizontCMS. It then tries to upload a malicious PHP file via an HTTP POST request to /admin/file-manager/fileupload. The server will rename this file to a random string. The module will […]

This Metasploit module exploits a local file inclusion vulnerability in Citrix ADC Netscaler.

This Metasploit module performs an authentication brute forcing attack against the panel in Bludit version 3.9.2.

This Metasploit module exploits a code execution vulnerability within the ASUS TM-AC1900 router as an authenticated user. The vulnerability is due to a failure filter out percent encoded newline characters within the HTTP argument SystemCmd when invoking /apply.cgi which bypasses the patch for CVE-2018-9285.

Water Billing System version 1.0 suffers from a remote SQL injection vulnerability.