:: Deepquest ::

Gitlab 14.9 – Authentication Bypass

Joomla Sexy Polling extension versions 2.1.7 and below suffer from a remote SQL injection vulnerability.

The USR IOT industrial router is vulnerable to hard-coded credentials within its Linux distribution image. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the device. Affected versions include 1.0.36 and 1.2.7.

This Metasploit module exploits a vulnerability in the Linux Kernel’s watch_queue event notification system. It relies on a heap out-of-bounds write in kernel memory. The exploit may fail on the first attempt so multiple attempts may be needed. Note that the exploit can potentially cause a denial of service if multiple failed attempts occur, however […]

This Metasploit module exploits the “custom script” feature of ADSelfService Plus. The feature was removed in build 6122 as part of the patch for CVE-2022-28810. For purposes of this module, a “custom script” is arbitrary operating system command execution. This module uses an attacker provided “admin” account to insert the malicious payload into the custom […]

This Metasploit module exploits the “custom script” feature of ADSelfService Plus. The feature was removed in build 6122 as part of the patch for CVE-2022-28810. For purposes of this module, a “custom script” is arbitrary operating system command execution. This module uses an attacker provided “admin” account to insert the malicious payload into the custom […]

Jenkins exploit that chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution. Jenkins versions below 2.138 are affected.

7-Zip versions 16 and below, and possibly other software that utilizes the HTML Help System to display help content to the user, are prone to a remote DLL hijacking issue which leads to arbitrary code execution due to an OS issue.

Online Restaurant Table Reservation System version 1.0 suffers from a remote SQL injection vulnerability.

Pharmacy Management System version 1.0 suffers from a remote shell upload vulnerability.