CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

27 matches found

Nuclei•added 2026/10/15 2:05 a.m.•137 views

BillQuick Web Suite SQL Injection

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xpcmdshell. id: CVE-2021-42258 info: name: BillQuick Web Suite SQL Injection...

9.8CVSS9.6AI score0.74426EPSS

SaveExploits3References5

RedhatCVE•added 2025/05/22 6:49 p.m.•15 views

CVE-2021-42258

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID aka username parameter. Successful exploitation can include...

9.8CVSS9AI score0.74426EPSS

SaveExploits3

Packet Storm•added 2024/08/31 12:00 a.m.•210 views

BillQuick Web Suite txtID SQL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BillQuick Web Suite txtID SQLi', 'Description' = %q This module exploits a SQL injection vulnerability in BillQUick Web Suite prior to version...

9.8CVSS7AI score0.74426EPSS

SaveExploits3

Tenable Nessus•added 2023/09/22 12:00 a.m.•43 views

Billquick Websuite < 22.0.9.1 SQLi

Binary data billquickcve-2021-42258.nbin...

9.8CVSS9.6AI score0.74426EPSS

SaveExploits3References2

Check Point Advisories•added 2021/11/25 12:00 a.m.•87 views

BillQuick Website SQL injection (CVE-2021-42258)

An SQL injection vulnerability exists in BillQuick Website. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

6.8CVSS9.9AI score0.74426EPSS

SaveExploits3

Rapid7 Blog•added 2021/11/12 3:36 p.m.•411 views

Metasploit Wrap-Up

Callback Hell Metasploit has now added an exploit module for CVE-2021-40449, a Windows local privilege escalation exploit caused by a use-after-free during the NtGdiResetDC callback in vulnerable versions of win32k.sys. This module can be used to escalate privileges to those of NT AUTHORITY\SYSTE...

6.8CVSS8.4AI score0.74426EPSS

SaveExploits18

BDU FSTEC•added 2021/11/10 12:00 a.m.•22 views

BillQuick Web Suite txtID Parameter Code Execution

The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.74426EPSS

SaveExploits3References4Affected Software1

CISA KEV Catalog•added 2021/11/03 12:00 a.m.•117 views

BQE BillQuick Web Suite SQL Injection Vulnerability

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution...

9.8CVSS10.3AI score0.74426EPSS

SaveIn wildExploits3

hivepro•added 2021/10/26 9:32 a.m.•78 views

BillQuick Web Suite’s severe vulnerability may affect 400K users

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Multiple versions of BillQuick Web Suite have been found to have a critical vulnerability. A hacker was able to get initial access to a US engineering company by exploiting this serious vulnerability CVE 2021 42258. It also...

7AI score

SaveExploits0

Positive Technologies•added 2021/10/26 12:00 a.m.•4 views

PT-2021-23669

Ни дня без ransomware: клиентов BQE Software вдоль и поперек шифруют вымогатели, эксплуатирующие критическую ошибку SQL-инъекции в биллинговом решений BillQuick Web Suite. Потенциальных жертв - 400 000 пользователей по всему миру. В массе своей атаки вымогателей нацелены на непропатченные сервера...

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•8 views

PT-2021-23587

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•6 views

PT-2021-23635

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•5 views

PT-2021-23637

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•10 views

PT-2021-23670

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•7 views

PT-2021-23586

SaveExploits0References2

Positive Technologies•added 2021/10/26 12:00 a.m.•8 views

PT-2021-23585

SaveExploits0References2

The Hacker News•added 2021/10/25 8:19 a.m.•108 views

Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

Cybersecurity researchers on Friday disclosed a now-patched critical vulnerability in multiple versions of a time and billing system called BillQuick that's being actively exploited by threat actors to deploy ransomware on vulnerable systems. CVE-2021-42258, as the flaw is being tracked as,...

9.8CVSS0.6AI score0.74426EPSS

SaveExploits3

NVD•added 2021/10/22 10:15 p.m.•51 views

CVE-2021-42258

9.8CVSS0.74426EPSS

SaveExploits3References2

osv_cve•added 2021/10/22 10:15 p.m.•11 views

CVE-2021-42258

9.8CVSS6.3AI score0.74426EPSS

SaveExploits3References2

Vulnrichment•added 2021/10/22 9:25 p.m.•15 views

CVE-2021-42258

8.9AI score0.74426EPSS

SaveExploits3References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by