BigBlueButton versions 2.3, prior to 2.4.8, and prior to 2.5.0 suffer from a persistent cross site scripting vulnerability.

Several PHP compatibility libraries contain a potential remote code execution flaw in their json_decode() function based on having copy pasted existing vulnerable code. Affected components include the WassUp Realtime analytics…

Carel pCOWeb HVAC BACnet Gateway version 2.1.0 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the file GET parameter through the logdownload.cgi bash script is not properly…

This archive contains all of the 92 exploits added to Packet Storm in June, 2022.

This archive contains all of the 92 exploits added to Packet Storm in June, 2022.

Backdoor.Win32.Cafeini.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.EvilGoat.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Coredoor.10.a malware suffers from an authentication bypass vulnerability.