>> ARCHIVE: 2022-07

Spryker Commerce OS with spryker/http module versions prior to 1.7.0 suffer from a remote command execution vulnerability due to a predictable value in use.

Travel Tours Script version 1.0 suffers from a remote SQL injection vulnerability.

Property Listing Script version 3.1 suffers from a remote SQL injection vulnerability.

Orange Station version 1.0 suffers from a remote SQL injection vulnerability.

Backdoor.Win32.HoneyPot.a malware suffers from a weak hardcoded password vulnerability.

Builder XtremeRAT malware version 3.7 suffers from an insecure permissions vulnerability.

Builder XtremeRAT malware version 3.7 suffers from an insecure cryptography implementation vulnerability that allows an attacker to login with only partial knowledge of a secret.