:: Deepquest ::

Carel pCOWeb HVAC BACnet Gateway version 2.1.0 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the file GET parameter through the logdownload.cgi bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.

This archive contains all of the 92 exploits added to Packet Storm in June, 2022.

This archive contains all of the 92 exploits added to Packet Storm in June, 2022.

Backdoor.Win32.Cafeini.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.EvilGoat.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Coredoor.10.a malware suffers from an authentication bypass vulnerability.

http://keumchad.go.th/zz.html notified by xNot_RespondinGx

http://namatoom.go.th/zz.html notified by xNot_RespondinGx

http://nkt.go.th/zz.html notified by xNot_RespondinGx

http://sridonpai.go.th/zz.html notified by xNot_RespondinGx