:: Deepquest ::

http://kalasin.nfe.go.th/bdkr.htm notified by Mr. BDKR28

ZKTeco ZEM500-510-560-760, ZEM600-800, ZEM720, and ZMM suffer from a missing authentication vulnerability. Versions below 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210) are potentially affected.

This Metasploit module exploits an unauthenticated PHP command injection vulnerability in GLPI versions 10.0.2 and below to execute a command.

Backdoor.Win32.Delf.arh malware suffers from an authentication bypass vulnerability.

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. […]

Email-Worm.Win32.Kipis.c malware suffers from a remote file write vulnerability that allows for remote code execution.

Backdoor.Win32.Psychward.10 malware suffers from an unauthenticated remote command execution vulnerability.

http://wangrongyai.go.th notified by Ajoyy

http://nongfan.go.th notified by Ajoyy