:: Deepquest ::

Backdoor.Win32.Zombam.a malware suffers from a remote stack buffer overflow vulnerability.

SmartAgent version 3.1.0 suffers from a privilege escalation vulnerability.

Cemetery Mapping and Information System version 1.0 suffers from multiple remote SQL injection vulnerabilities.

Gila CMS version 2.0.0 suffers from a remote code execution vulnerability.

WordPress AIT CSV Import/Export plugin versions 3.0.3 and below allow unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded content. It may return an error when attempting to parse a CSV, however the uploaded shell is left. The shell is uploaded to wp-content/uploads/. The […]

This Metasploit module exploits a vulnerability in cldflt.sys. The Cloud Filter driver on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IO_FORCE_ACCESS_CHECK or OBJ_FORCE_ACCESS_CHECK flags when calling FltCreateFileEx() and FltCreateFileEx2() within its HsmpOpCreatePlaceholders() function with attacker controlled input. This meant that files were created with KernelMode permissions, thereby […]

http://www.banon-ngao.go.th/z.htm notified by Xyp3r2667

http://bgr11.dgr.go.th/bots.txt notified by Xyp3r2667

http://bgr12.dgr.go.th/bots.txt notified by Xyp3r2667

Erlang Cookie – Remote Code Execution