:: Deepquest ::

http://sukhothaipao.go.th/public/ notified by Admirale_Mouh

http://khaochangum.go.th/public/ notified by Admirale_Mouh

This Metasploit module exploits an unauthenticated command injection vulnerability in the yrange parameter in OpenTSDB through 2.4.0 (CVE-2020-35476) in order to achieve unauthenticated remote code execution as the root user. The module first attempts to obtain the OpenTSDB version via the api. If the version is 2.4.0 or lower, the module performs additional checks to […]

Senayan Library Management System version 9.2.2 suffers from a cross site scripting vulnerability.

Senayan Library Management System version 9.2.2 suffers from a remote SQL injection vulnerability.

4images version 1.9 suffers from a remote command execution vulnerability.

Eclipse Business Intelligence Reporting Tool versions 4.11.0 and below suffer from a bypass vulnerability that allows for remote code execution.

Apple Security Advisory 2022-12-13-1 – iOS 16.2 and iPadOS 16.2 addresses bypass, code execution, out of bounds write, spoofing, and use-after-free vulnerabilities.

Apple Security Advisory 2022-12-13-2 – iOS 15.7.2 and iPadOS 15.7.2 addresses bypass, code execution, integer overflow, out of bounds write, and spoofing vulnerabilities.

Apple Security Advisory 2022-12-13-3 – iOS 16.1.2 addresses a code execution vulnerability.