:: Deepquest ::

Multix version 2.4 suffers from a cross site scripting vulnerability.

Multix version 2.4 suffers from a cross site request forgery vulnerability.

WorkOrder CMS version 0.1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

WorkOrder CMS version 0.1.0 suffers from a cross site scripting vulnerability.

Linux stable versions 5.4 and 5.10 suffers from a page use-after-free via stale TLB caused by an rmap lock not held during PUD move.

Various versions of Bitbucket Server and Data Center are vulnerable to an unauthenticated command injection vulnerability in multiple API endpoints. The /rest/api/latest/projects/{projectKey}/repos/{repositorySlug}/archive endpoint creates an archive of the repository, leveraging the git-archive command to do so. Supplying NULL bytes to the request enables the passing of additional arguments to the command, ultimately enabling execution of […]

Testa 3.5.1 Online Test Management System – Reflected Cross-Site Scripting (XSS)

Aero CMS v0.0.1 – SQLi

WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)

WordPress Plugin WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS)