h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection (Unauthenticated) Create: 2023-02-16 09:42:48 +0000 UTC Push: 2023-02-16 09:42:48 +0000 UTC |

h4md153v63n/CVE-2022-40032-Simple-Task-Managing-System---login-and-password-SQL-Injection-Unauthenticated- CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection (Unauthenticated) Create: 2023-02-16 09:33:09 +0000 UTC Push: 2023-02-16 09:33:09 +0000 UTC |

Live-Hack-CVE/CVE-2023-22855 Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files CVE project by @Sn0wAlice Create: 2023-02-16 07:26:06 +0000 UTC Push: 2023-02-16 07:26:08 +0000 UTC |

Live-Hack-CVE/CVE-2022-45546 Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing. CVE project by @Sn0wAlice Create: 2023-02-16 07:26:02 +0000 UTC Push: 2023-02-16 07:26:05 +0000 UTC |

Live-Hack-CVE/CVE-2022-42455 ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges CVE project by @Sn0wAlice Create: 2023-02-16 07:25:59 +0000 UTC Push: 2023-02-16 07:26:01 +0000 UTC |

Live-Hack-CVE/CVE-2022-45543 Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:55 +0000 UTC Push: 2023-02-16 07:25:57 +0000 UTC |

Live-Hack-CVE/CVE-2023-0850 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifi CVE project by @Sn0wAlice Create: 2023-02-16 07:25:47 +0000 UTC Push: 2023-02-16 07:25:50 +0000 UTC |

Live-Hack-CVE/CVE-2023-0849 A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifie CVE project by @Sn0wAlice Create: 2023-02-16 07:25:42 +0000 UTC Push: 2023-02-16 07:25:46 +0000 UTC |

Live-Hack-CVE/CVE-2023-0848 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Management Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use CVE project by @Sn0wAlice Create: 2023-02-16 07:25:38 +0000 UTC Push: 2023-02-16 07:25:41 +0000 UTC |

Live-Hack-CVE/CVE-2022-40016 Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in librtmp, allows attackers to cause a denial of service. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:35 +0000 UTC Push: 2023-02-16 07:25:37 +0000 UTC |

Live-Hack-CVE/CVE-2022-38935 An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:31 +0000 UTC Push: 2023-02-16 07:25:33 +0000 UTC |

Live-Hack-CVE/CVE-2022-38868 SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to execute arbitrary code. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:28 +0000 UTC Push: 2023-02-16 07:25:30 +0000 UTC |

Live-Hack-CVE/CVE-2022-38867 SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, and 4.0.2 in api.go, allows attackers to execute arbitrary code. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:24 +0000 UTC Push: 2023-02-16 07:25:27 +0000 UTC |

Live-Hack-CVE/CVE-2021-34117 SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:21 +0000 UTC Push: 2023-02-16 07:25:23 +0000 UTC |

Live-Hack-CVE/CVE-2021-33925 SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May 19, 2021) allows unauthenticated attackers to gain escilated privledges via a crafted login. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:17 +0000 UTC Push: 2023-02-16 07:25:20 +0000 UTC |

Live-Hack-CVE/CVE-2021-33396 Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:13 +0000 UTC Push: 2023-02-16 07:25:16 +0000 UTC |

Live-Hack-CVE/CVE-2021-33304 Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:10 +0000 UTC Push: 2023-02-16 07:25:12 +0000 UTC |

Live-Hack-CVE/CVE-2020-21120 SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:07 +0000 UTC Push: 2023-02-16 07:25:09 +0000 UTC |

Live-Hack-CVE/CVE-2020-21119 SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:03 +0000 UTC Push: 2023-02-16 07:25:05 +0000 UTC |

Live-Hack-CVE/CVE-2020-19825 Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges. CVE project by @Sn0wAlice Create: 2023-02-16 07:25:00 +0000 UTC Push: 2023-02-16 07:25:02 +0000 UTC |