:: Deepquest ::

WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)

http://kaokum.go.th/m6.htm notified by magelang6etar

http://wianglocal.go.th/m6.htm notified by magelang6etar

This is a write up demonstrating how to get root on macOS 12.3.1 using CoreTrust and DriverKit bugs. Included is the spawn_root proof of concept.

Zentao Project Management System version 17.0 suffers from an authenticated remote code execution vulnerability.

During a penetration test of an Electronic Banking Internet Communication Standard (EBICS) environment, Pentagrid observed a cross site scripting vulnerability in the EBICS banking implementation developed by CREALOGIX AG and used by many banks.

Web Based Student Clearance version 1.0 suffers from a remote shell upload vulnerability.

Joomla Vik Rent Car extension version 1.14 suffers from a cross site scripting vulnerability.

WordPress / Joomla JReviews extension version 4.1.5 suffers from a cross site scripting vulnerability.

WordPress eCommerce Product Catalog plugin version 3.0.70 suffers from a cross site scripting vulnerability.