Exploits & CVE's

Authored by Google Security Research, mjurczyk The Microsoft Windows kernel suffers from an invalid read in nt!MiRelocateImage while parsing a malformed PE file. advisories | CVE-2022-30155

Authored by CraCkEr Travel Tours Script version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ┌┌────────────────────────────────────────────────────────────────────────────┐││ ...

Authored by CraCkEr Property Listing Script version 3.1 suffers from a remote SQL injection vulnerability. Change Mirror Download ┌┌────────────────────────────────────────────────────────────────────────────────────┐││ ...

Authored by nu11secur1ty Orange Station version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: Orange Station 1.0 SQLi## Author: nu11secur1ty## Date: 0.16.2022## Vendor: https://www.mayurik.com/## Software: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html## Reference:...

Authored by malvuln | Site malvuln.com Backdoor.Win32.HoneyPot.a malware suffers from a weak hardcoded password vulnerability. Change Mirror Download Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022Original source: https://malvuln.com/advisory/e3bb503f9b02cf57341695f30e31128f.txtContact: [email protected]: twitter.com/malvulnThreat:...

Authored by malvuln | Site malvuln.com Builder XtremeRAT malware version 3.7 suffers from an insecure permissions vulnerability. Change Mirror Download Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022Original source: https://malvuln.com/advisory/7f314e798c150aedd9ce41ed39318f65.txtContact:...

Authored by malvuln | Site malvuln.com Builder XtremeRAT malware version 3.7 suffers from an insecure cryptography implementation vulnerability that allows an attacker to login with only partial knowledge of a...

Authored by Angelo Pio Amirante Asus GameSDK version 1.0.0.4 suffers from an unquoted service path vulnerability in GameSDK.exe. advisories | CVE-2022-35899 Change Mirror Download # Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted...

Authored by James Forshaw, Google Security Research On Microsoft Windows, the LsapGetClientInfo API in LSASRV will fallback and directly capture a caller's impersonation token if it fails to impersonate, leading...

Authored by Spencer McIntyre, Altelus1 | Site metasploit.com A vulnerability exists within Sourcegraph's gitserver component that allows a remote attacker to execute arbitrary OS commands by modifying the core.sshCommand value...