The Haxolot'ls

Passionate Bug Hunters!

Jan 10, 2022

Pre-Auth RCE in Moodle Part II - Session Hijack in Moodle's Shibboleth

CVE-2021-40691

Jul 27, 2021

Pre-Auth RCE in Moodle Part I - PHP Object Injection in Shibboleth Module

CVE-2021-36394

Jul 26, 2021

Pre-Auth RCE in ManageEngine OPManager

CVE-2020-28653