>> ARCHIVE: 2022-02

Backdoor.Win32.XRat.k malware suffers from an unauthenticated remote command execution vulnerability.

Exam Reviewer Management System version 1.0 suffers from a remote SQL injection vulnerability.

Exam Reviewer Management System version 1.0 suffers from a remote shell upload vulnerability.

Backdoor.Win32.Prexot.a malware suffers from a man-in-the-middle vulnerability.

Backdoor.Win32.Wdoor.11 malware suffers from an unauthenticated remote command execution vulnerability.

Atom CMS version 2.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.Prexot.a malware suffers from a bypass vulnerability.

Backdoor.Win32.Freddy.2001 malware suffers from authentication bypass and remote command execution vulnerabilities.

This Metasploit module exploits a command injection vulnerability in Grandstream GXV31XX IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands….