CVE-2022-4599 Shoplazza LifeStyle Product cross site scripting

A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api/theme-edit/ of the component Product Handler. The manipulation of the argument Subheading/Heading/Text/Button Text/Label leads to cross...

CVE-2022-3157

creationtimestamp| type| source ---|---|--- 2022-12-17 00:24:37+00:00| seen| https://t.me/cibsecurity/54786...

CVE-2022-4587 Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting

A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site...

CVE-2022-4585 Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting

A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is...

CVE-2022-4589 cyface Terms and Conditions Module views.py returnTo redirect

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading ...

CVE-2022-4563

creationtimestamp| type| source ---|---|--- 2022-12-16 20:24:42+00:00| seen| https://t.me/cibsecurity/54772...

Cross site scripting

A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...

CVE-2022-4520

A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file components/registry/org.wso2.carbon.registry.search.ui/src/main/resources/web/search/advancedSearchForm-ajaxprocessor.jsp of the...

CVE-2022-39930

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-31701

creationtimestamp| type| source ---|---|--- 2022-12-14 22:22:53+00:00| seen| https://t.me/cibsecurity/54551...

CVE-2022-46996

creationtimestamp| type| source ---|---|--- 2022-12-14 18:22:45+00:00| seen| https://t.me/cibsecurity/54520 2025-04-21 20:03:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12758...

CVE-2022-46118

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=productperbrand&bid=...

CVE-2022-41271

creationtimestamp| type| source ---|---|--- 2022-12-13 07:21:26+00:00| seen| https://t.me/cibsecurity/54377...

CVE-2022-41274

creationtimestamp| type| source ---|---|--- 2022-12-13 07:21:25+00:00| seen| https://t.me/cibsecurity/54376...

CVE-2022-37929

creationtimestamp| type| source ---|---|--- 2022-12-12 16:25:47+00:00| seen| https://t.me/cibsecurity/54306...

CVE-2022-23485

creationtimestamp| type| source ---|---|--- 2022-12-10 07:13:54+00:00| seen| https://t.me/cibsecurity/54254...

CVE-2022-41947

creationtimestamp| type| source ---|---|--- 2022-12-09 02:12:53+00:00| seen| https://t.me/cibsecurity/54210...

CVE-2022-45501

creationtimestamp| type| source ---|---|--- 2022-12-08 18:17:38+00:00| seen| https://t.me/cibsecurity/54164...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit...

CVE-2022-46332

creationtimestamp| type| source ---|---|--- 2022-12-06 22:49:42+00:00| seen| https://t.me/cibsecurity/54097 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92344 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92344 2026-07-15 00:00:31+00:00| published-proof-of-concept|...