http://paknamprasae.rayongpolice.go.th/bc7.html notified by BCA-X666X
>> ARCHIVE: 2021-01
http://paknamprasae.rayongpolice.go.th/bc7.html notified by BCA-X666X
Quick.CMS 6.7 – Remote Code Execution (Authenticated)
Online Grading System 1.0 – ‘uname’ SQL Injection
BloofoxCMS 0.5.2.1 – ‘text’ Stored Cross Site Scripting
Openlitespeed Web Server version 1.7.8 suffers from an authenticated command injection vulnerability.
Backdoor.Win32.DarkKomet.apbb malware suffers from an insecure permissions vulnerability.
Backdoor.Win32.Wollf.14 malware has a backdoor on TCP/7614 that does not require any authentication.
Constructor.Win32.SpyNet.a malware suffers from a remote password leak vulnerability.
Revive Adserver versions 5.1.0 and below suffer from multiple reflective cross site scripting vulnerabilities.
STVS ProVision version 5.9.10 suffers from an authenticated file disclosure vulnerability in archive.rb.