>> ARCHIVE: 2022-05

Toll Tax Management System version 1.0 suffers from a remote SQL injection vulnerability.

Covid 19 Travel Pass Management System version 1.0 suffers from a remote SQL injection vulnerability.

Ransom.LockBit malware suffers from a dll hijacking vulnerability.

Strap versions prior to 3.6.9 and 4.1.5 disclose a user’s password due to simply base64 encoding it and sticking it in a cookie.

WordPress Stafflist plugin version 3.1.2 suffers from a remote SQL injection vulnerability.

WordPress Stafflist plugin version 3.1.2 suffers from a cross site request forgery vulnerability.

This Metasploit module abuses a vulnerability in certain WSO2 products that allow unrestricted file upload with resultant remote code execution. This affects WSO2 API Manager 2.2.0 and above through 4.0.0;…

This archive contains all of the 150 exploits added to Packet Storm in April, 2022.

This archive contains all of the 150 exploits added to Packet Storm in April, 2022.