eop24-26229

Firebeam CVE-2024-26229 plugin A small firebeam kaine's risc-v vm plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys. The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD-PreviousMode and then to leveraging DKOM to achieve LP...

CVE-2019-16098

CVE-2019-16098 This CVE exploits the RTCore64.sys driver and creates a cmd.exe process with system privileges by copying the token of the System process with one of the low-privilege cmd.exe process. Blog about the approach and the methodology can be found here...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

EUVD-2026-58786

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-18403

CVE-2026-18403 - LimeSurvey Community Edition 7.0.5 has an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list. Affected component is the CPDB workflow; the underlying issue is an authe...

PT-2026-72086

Name of the Vulnerable Software and Affected Versions LimeSurvey Community Edition version 7.0.5 Description An authenticated SQL injection exists in the Central Participant Database CPDB workflow. This issue occurs during the process of copying survey participant tokens to the central participan...