CASAP Automated Enrollment System version 1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Web Based Quiz System version 1.0 suffers from a persistent cross site scripting vulnerability related to MCQ options.
AnyDesk 5.5.2 – Remote Code Execution
Local Services Search Engine Management System (LSSMES) 1.0 – ‘name’ Persistent Cross-Site Scripting (XSS)
Local Services Search Engine Management System (LSSMES) 1.0 – Blind & Error based SQL injection (Authenticated)
https://buathongcity.go.th/tmp/senius.html notified by ZoRRoKiN
http://bgepa.dgr.go.th/2558/templates/ notified by Xyp3r2667
http://procurement.dgr.go.th/egp/ notified by Xyp3r2667
WiFi Mouse version 1.7.8.5 suffers from a remote code execution vulnerability.
Backdoor.Win32.RemoteManipulator.fdo malware suffers from an insecure permissions vulnerability.