EUVD-2022-46033

Malicious code in bioql PyPI...

Sql injection

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients...

CVE-2022-40405

CVE-2022-40405 affects WoWonder Social Network Platform v4.1.2 and is due to a SQL injection vulnerability in the offset parameter of requests.php?f=load-my-blogs. The CVSS 3.1 base score is 7.5 (High), with network attack vector, no privileges required, no user interaction, and a confidentiality...

WoWonder Social Network Platform 3.1 - Authentication Bypass

Exploit Title: WoWonder Social Network Platform 3.1 - Authentication Bypass Date: 11.06.2021 Exploit Author: securityforeveryone.com Researchers : Security For Everyone Team - https://securityforeveryone.com Vendor Homepage: https://www.wowonder.com/ Software Link:...