:: Deepquest ::

Fog Project version 1.5.9 suffers from a remote shell upload vulnerability.

Cacti version 1.2.12 remote code execution exploit that leverages a remote SQL vulnerability.

NodeBB Emoji plugin version 3.2.1 suffers from an arbitrary file write vulnerability.

Moodle 3.6.1 – Persistent Cross-Site Scripting (XSS)

http://www.rb2.go.th/admin/pic_title/1700400107041202104171618608639.jpg notified by Xyp3r2667

Apple Security Advisory 2021-04-26-1 – iOS 14.5 and iPadOS 14.5 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Apple Security Advisory 2021-04-26-2 – macOS Big Sur 11.3 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Apple Security Advisory 2021-04-26-3 – Security Update 2021-002 Catalina addresses buffer overflow, bypass, code execution, denial of service, double free, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Apple Security Advisory 2021-04-26-4 – Security Update 2021-003 Mojave addresses buffer overflow, code execution, denial of service, double free, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Apple Security Advisory 2021-04-26-6 – tvOS 14.5 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.