:: Deepquest ::

YeaLink SIP-TXXXP 53.84.0.15 – ‘cmd’ Command Injection (Authenticated)

This Metasploit module exploits a remote command injection vulnerability in Movable Type versions 7 r.5002 and below.

Google Assistant suffered from an authentication bypass vulnerability allowing a webpage to execute commands without permission.

Google Assistant suffered from an authentication bypass vulnerability allowing a webpage to execute commands without permission.

Employee and Visitor Gate Pass Logging System 1.0 – ‘name’ Stored Cross-Site Scripting (XSS)

Employee Daily Task Management System 1.0 – ‘Name’ Stored Cross-Site Scripting (XSS)

Backdoor.Win32.VB.afu malware suffers from an insecure permissions vulnerability.

FusionPBX version 4.5.29 suffers from a remote code execution vulnerability.

Money Transfer Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Backdoor.Win32.VB.afu suffers from an insecure transit vulnerability that discloses credentials.