:: Deepquest ::

Comment System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

Backdoor.Win32.Bionet.10 malware has an ftp service that allows for anonymous login.

Beauty Parlour Management System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Prof. Kailas Patil in June of 2020.

Beauty Parlour Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

Online Exam System With Timer version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

dataSIMS Avionics ARINC 664-1 version 4.5.3 suffers from a local buffer overflow vulnerability.

This program demonstrates a time-of-check-time-of-use TOCTOU vulnerability in Firejail. Winning it causes Firejail to create an insecure overlayfs layout, that is then used to escalate privileges by making /etc/ld.so.preload user writable.

Gitea version 1.12.5 suffers from a remote code execution vulnerability.

Backdoor.Win32.Agent.aak malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Agent.aak malware suffers from code execution and cross site request forgery vulnerabilities.