:: Deepquest ::

VMware vCenter Server RCE 6.5 / 6.7 / 7.0 – Remote Code Execution (RCE) (Unauthenticated)

Simple CRM 3.0 – ’email’ SQL injection (Authentication Bypass)

Online Library Management System 1.0 – Arbitrary File Upload Remote Code Execution (Unauthenticated)

Online Library Management System 1.0 – ‘Search’ SQL Injection

WordPress Plugin Poll, Survey, Questionnaire and Voting system 1.5.2 – ‘date_answers’ Blind SQL Injection

WordPress Plugin WP Google Maps 8.1.11 – Stored Cross-Site Scripting (XSS)

ASUS DisplayWidget Software 3.4.0.036 – ‘ASUSDisplayWidgetService’ Unquoted Service Path

iFunbox 4.2 – ‘Apple Mobile Device Service’ Unquoted Service Path

Wise Care 365 5.6.7.568 – ‘WiseBootAssistant’ Unquoted Service Path

Solaris SunSSH 11.0 x86 – libpam Remote Root (3)