:: Deepquest ::

10-Strike Network Inventory Explorer Pro version 9.05 SEH buffer overflow exploit.

This Metasploit module exploits an unauthenticated command execution vulnerability in TerraMaster TOS version 4.2.06 leveraging include/makecvs.php.

Baby Care System version 1.0 suffers from a remote SQL injection vulnerability.

Class Scheduling System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

Online Learning Management System version 1.0 suffers from multiple remote SQL injection vulnerabilities.

Online Learning Management System version 1.0 suffers from multiple cross site scripting vulnerabilities.

Sales and Inventory System for Grocery Store version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

usrsctp suffers from a use-after-free write when handling a malicious COOKIE-ECHO.

CVE-2020-0986, which was exploited in the wild, was not fixed. The vulnerability still exists, just the exploitation method had to change. A low integrity process can send LPC messages to splwow64.exe (Medium integrity) and gain a write-what-where primitive in splwow64’s memory space. The attacker controls the destination, the contents that are copied, and the number […]

Apartment Visitors Management System 1.0 – Authentication Bypass