:: Deepquest ::

Prestashop blockwishlist module 2.1.0 – SQLi

ThingsBoard 3.3.1 ‘description’ – Stored Cross-Site Scripting (XSS)

Thingsboard version 3.3.1 suffers from multiple persistent cross site scripting vulnerabilities.

WordPress Testimonial Slider and Showcase plugin version 2.2.6 suffers from a persistent cross site scripting vulnerability.

Online Admission System version 1.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.Bushtrommel.122 malware suffers from an authentication bypass vulnerability.

Backdoor.Win32.Bushtrommel.122 malware suffers from an unauthenticated remote command execution vulnerability.

WordPress Ecwid Ecommerce Shopping Cart plugin versions 6.10.23 and below suffer from a cross site request forgery vulnerability.

This Metasploit module creates a RAR file that can be emailed to a Zimbra server to exploit CVE-2022-30333. If successful, it plants a JSP-based backdoor in the public web directory, then executes that backdoor. The core vulnerability is a path-traversal issue in unRAR that can extract an arbitrary file to an arbitrary location on a […]

This Metasploit module creates a RAR file that can be emailed to a Zimbra server to exploit CVE-2022-30333. If successful, it plants a JSP-based backdoor in the public web directory, then executes that backdoor. The core vulnerability is a path-traversal issue in unRAR that can extract an arbitrary file to an arbitrary location on a […]