>> ARCHIVE: 2022-09

Backdoor.Win32.Winshell.5_0 malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Hupigon.aspg malware suffers from an unquoted service path vulnerability.

Trojan-Spy.Win32.Pophot.bsl malware suffers from an insecure permissions vulnerability.

FE File Explorer version 11.0.4 suffers from a local file inclusion vulnerability.

Trojan.Win32.Autoit.fhj malware creates two processes “xservice.exe” and a child process “xps.exe”. The process creates an IPC pipe with a NULL DACL allowing RW for the Everyone user group.

Trojan-Ransom.Win32.Hive.bv malware suffers from a code execution vulnerability.

Online Employee Leave Management System version 1.0 suffers from a cross site request forgery vulnerability.

Wifi HD Wireless Disk Drive version 11 suffers from a local file inclusion vulnerability.