eop24-26229

Plugin Firebeam CVE-2024-26229 Un pequeño plugin de firebeam máquina virtual risc-v de kaine para explotar la vulnerabilidad CVE-2024-26229 que utiliza un IOCTL vulnerable en csc.sys. La vulnerabilidad se utiliza para obtener acceso de memoria R/W del kernel para corromper KTHREAD-PreviousMode y...

CVE-2019-16098

CVE-2019-16098 This CVE exploits the RTCore64.sys driver and creates a cmd.exe process with system privileges by copying the token of the System process with one of the low-privilege cmd.exe process. Blog about the approach and the methodology can be found here...

EUVD-2026-58786

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-18403

CVE-2026-18403 - LimeSurvey Community Edition 7.0.5 has an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list. Affected component is the CPDB workflow; the underlying issue is an authe...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...