Exploits & CVE's

Authored by malvuln | Site malvuln.com Virus.Win32.Qvod.b malware suffers from an insecure permissions vulnerability. Change Mirror Download Discovery / credits: Malvuln - malvuln.com (c) 2022Original source: https://malvuln.com/advisory/c44a9580e17bad0aa27329e51b7d0ae0.txtContact: [email protected]: twitter.com/malvulnThreat: Virus.Win32.Qvod.bVulnerability: Insecure Permissions...

Authored by malvuln | Site malvuln.com Email-Worm.Win32.Sidex malware suffers from a remote command execution vulnerability. Change Mirror Download Discovery / credits: Malvuln - malvuln.com (c) 2022Original source: https://malvuln.com/advisory/a98cdaa89da57bf269873db63e22a939.txtContact: [email protected]: twitter.com/malvulnThreat: Email-Worm.Win32.SidexVulnerability: Unauthenticated...

Authored by Saud Alenazi Pharmacy Management System version 1.l0 suffers from a remote SQL injection vulnerability. Change Mirror Download # Exploit Title: Pharmacy management system - 'email' SQL injection# Date: 19/04/2022# Exploit...

Authored by LiquidWorm | Site zeroscience.mk The USR IOT industrial router is vulnerable to hard-coded credentials within its Linux distribution image. These sets of credentials are never exposed to the...

Authored by Jann Horn, bwatters-r7, bonfee | Site metasploit.com This Metasploit module exploits a vulnerability in the Linux Kernel's watch_queue event notification system. It relies on a heap out-of-bounds write...

Authored by Jake Baines, Andrew Iwamaye, Dan Kelley, Hernan Diaz | Site metasploit.com This Metasploit module exploits the "custom script" feature of ADSelfService Plus. The feature was removed in build...

Authored by Mariam Tariq WordPress ScrollReveal.js Effects plugin version 1.1.1 suffers from a persistent cross site scripting vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin ScrollReveal.js Effects - Stored Cross Site...

Authored by Wolfgang Hotwagner | Site ait.ac.at Joomla Sexy Polling extension versions 2.1.7 and below suffer from a remote SQL injection vulnerability. Change Mirror Download SexyPolling SQL Injection====================| Identifier: | AIT-SA-20220208-01|| Target:...

Authored by Mariam Tariq WordPress WP-Invoice plugin version 4.3.1 suffers from a persistent cross site scripting vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin WP-Invoice - Stored Cross Site Scripting#...

Authored by stacksmashing, Greenwolf Gitlab versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.7 prior to 14.7.7 suffer from a bypass vulnerability due to having set a hardcoded...