>> ARCHIVE: 2022-03

BuilderOrcus malware suffers from an insecure credential storage vulnerability.

BuilderPandoraRat.b malware suffers from an insecure credential storage vulnerability.

BuilderTorCTPHPRAT.b malware suffers from an insecure credential storage vulnerability.

BuilderTorCTPHPRAT.b malware suffers from a remote shell upload vulnerability.

BuilderTorCTPHPRAT.b malware suffers from a cross site scripting vulnerability.

BuilderRevengeRAT malware suffers from an XML injection vulnerability.

Apache APISIX version 2.12.1 suffers from a remote code execution vulnerability.

Tiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.

Hikvision IP Camera has a backdoor where a magic string allows instant access regardless of authentication.

Pluck CMS version 4.7.16 suffers from a remote shell upload execution vulnerability.