:: Deepquest ::

OTRS version 6.0.1 remote command execution exploit.

Packed.Win32.Black.d malware has an unauthenticated open proxy vulnerability.

BMD BMDWeb 2.0 versions prior to 24.01.21 suffer from persistent cross site scripting vulnerabilities.

CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)

OTRS 6.0.1 – Remote Command Execution (2)

Cisco RV-series routers suffer from an authentication bypass vulnerability. The RV34X series are also affected by a command injection vulnerability in the sessionid cookie, when requesting the /upload endpoint. A combination of these issues would allow any person who is able to communicate with the web interface to run arbitrary system commands on the router […]

Phone Shop Sales Management System version 1.0 suffers from a remote shell upload vulnerability.

Fibaro Home Center Light and Fibaro Home Center 2 versions 4.600 and below suffer from man-in-the-middle, missing authentication, remote command execution, and missing encryption vulnerabilities.

Microsoft Diaghub suffers from a privilege escalation vulnerability.

Discourse version 2.7.0 suffers from a 2FA bypass via a rate limiting bypass vulnerability.