Exploits & CVE's

Authored by Hassan Khan Yusufzai WordPress Stafflist plugin version 3.1.2 suffers from a cross site scripting vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin stafflist 3.1.2 - Reflected XSS (Authenticated)# Date:...

Authored by LiquidWorm | Site zeroscience.mk Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the...

Authored by mr_me, wvu, Udhaya Prakash | Site metasploit.com This Metasploit module exploits CVE-2022-22954, an unauthenticated server-side template injection (SSTI) vulnerability in VMware Workspace ONE Access, to execute shell commands...

Authored by Reginaldo Silva, jbaines-r7 | Site metasploit.com This Metasploit module exploits CVE-2022-0543, a Lua-based Redis sandbox escape. The vulnerability was introduced by Debian and Ubuntu Redis packages that insufficiently...

Authored by nu11secur1ty Home Clean Service System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: Home Clean Service System v1.0 - 2022 SQLi## Author: nu11secur1ty## Date:...

Authored by nu11secur1ty Toll Tax Management System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: Toll Tax Management System v1.0 SQLi## Author: nu11secur1ty## Date: 04.07.2022## Vendor:...

Authored by nu11secur1ty Covid 19 Travel Pass Management System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: Covid 19 Travel Pass Management System v1.0 SQLi##...

Authored by malvuln | Site malvuln.com Ransom.LockBit malware suffers from a dll hijacking vulnerability. Change Mirror Download Discovery / credits: Malvuln - malvuln.com (c) 2022Original source: https://malvuln.com/advisory/96de05212b30ec85d4cf03386c1b84af.txtContact: [email protected]: twitter.com/malvulnThreat: Ransom.LockBitVulnerability: DLL HijackingDescription:...

Authored by Kitchaphan Singchai Strap versions prior to 3.6.9 and 4.1.5 disclose a user's password due to simply base64 encoding it and sticking it in a cookie. advisories | CVE-2021-46440 Change Mirror...

Authored by Hassan Khan Yusufzai WordPress Stafflist plugin version 3.1.2 suffers from a remote SQL injection vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin stafflist 3.1.2 - SQL Injection(Authenticated)# Date: 05-02-2022#...