>> AUTHOR: deepcore

BuilderRevengeRAT malware suffers from an XML injection vulnerability.

Apache APISIX version 2.12.1 suffers from a remote code execution vulnerability.

Tiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.

Hikvision IP Camera has a backdoor where a magic string allows instant access regardless of authentication.

Moodle version 3.11.5 suffers from an authenticated remote SQL injection vulnerability.

Pluck CMS version 4.7.16 suffers from a remote shell upload execution vulnerability.

Chrome suffers from an integer overflow vulnerability in HandleTable::AddDispatchersFromTransit that can lead to memory corruption.

The Windows Print Spooler has a privilege escalation vulnerability that can be leveraged to achieve code execution as SYSTEM. The SpoolDirectory, a configuration setting that holds the path that a…

College Website Management System version 1.0 suffers from a remote SQL injection vulnerability.

Laravel Media Library Pro versions 2.1.6 and below as well as 1.17.10 and below suffer from a remote shell upload vulnerability.