Exploits & CVE's

Authored by Jann Horn, Google Security Research On CPUs without SELFSNOOP support, a Xen PV domain that has access to a PCI device (which grants the domain the ability to...

Authored by Giovanni Pellerano | Site ush.it EQS Integrity Line versions through 2022-07-01 suffer from cross site scripting and sensitive information disclosure vulnerabilities. advisories | CVE-2022-34007 Change Mirror Download EQS Integrity Line: Multiple...

Authored by indoushka DouPHP version 1.2 Release 20141027 suffers from a remote SQL injection vulnerability. Change Mirror Download ====================================================================================================================================| # Title : DouPHP v1.2 Release 20141027 SQL Injection...

Authored by malvuln | Site malvuln.com Lockbit ransomware version 3.0 apparently now requires a password to execute as noted by "@vxunderground", but does not properly check bounds for both the...

Authored by James Forshaw, Google Security Research The handling of Windows Defender Remote Credential Guard credentials is vulnerable to authentication relay attacks leading to elevation of privilege or authentication bypass. advisories...

Authored by indoushka Advanced Testimonials Manager version 5.6 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Change Mirror Download ====================================================================================================================================| # Title : Advanced...

Authored by malvuln | Site malvuln.com Lockbit version 3.0 ransomware looks for and executes DLLs in its current directory. Therefore, we can hijack a DLL, in this case "RstrtMgr.dll", execute...

Authored by Giulio Garzia Magnolia CMS versions 6.2.19 and below suffer from a persistent cross site scripting vulnerability. advisories | CVE-2022-33098 Change Mirror Download # Exploit Title: Magnolia CMS <= 6.2.19 - Stored...

Authored by nu11secur1ty Paymoney version 3.3 suffers from a cross site scripting vulnerability. Change Mirror Download ## Title: paymoney-3.3 XSS-Reflected## Author: nu11secur1ty## Date: 07.02.2022## Vendor: https://paymoney.techvill.org/## Software: paymoney-3.3## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3Description:The parameters first_name...

Authored by Eldar Marcussen Several PHP compatibility libraries contain a potential remote code execution flaw in their json_decode() function based on having copy pasted existing vulnerable code. Affected components include...