CVE-2022-0867

The CVE-2022-0867 entry concerns WordPress ARPrice/Pricing Table plugins (pre-3.6.1). The vulnerability is a SQL injection caused by improper sanitization/escaping of POST data, which is interpolated into an SQL statement and executed via an AJAX action that unauthenticated users can access. Docu...

CVE-2022-30777

The CVE-2022-30777 issue affects Parallels H-Sphere 3.6.1713, where a Cross-Site Scripting (XSS) flaw exists in the index_en.php via the 'from' parameter. Exploitation could allow arbitrary script execution in the victim’s browser, potentially leading to session hijacking, defacement, or theft of...

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 are affected by a SQL injection vulnerability in USERDBDomains.Domainname at cgi-bin/platform.cgi. The CVE-2022-29383 entry shows a high/critical impact with network access and no authentication required, affecting multiple firmware version...

CVE-2022-29303

CVE-2022-29303 targets SolarView Compact (CONTEC). Affected: ver.6.00; vulnerability in the web server’s conf_mail.php allows OS command injection due to improper input validation on the send test mail console. Impact per sources: potential remote execution of arbitrary commands with high confide...

CVE-2022-30525

CVE-2022-30525 is an OS command injection in Zyxel firewall CGI (Zero Touch Provisioning) that allows remote, unauthenticated code execution via /ztp/cgi-bin/handler (nobody user). Affected: USG FLEX series (5.00–5.21 Patch 1), USG FLEX 50W/USG20(W)-VPN (5.10–5.21 Patch 1), ATP series (5.10–5.21 ...

CVE-2022-30047

CVE-2022-30047 affects Mingsoft MCMS v5.2.7, with a SQL injection vulnerability in the /mdiy/dict/listExcludeApp URI via the orderBy parameter. The vulnerability is documented with CVSS v3.1 metrics (9.8, CRITICAL) and CVSS v2 metrics (7.5, HIGH). Connected sources consistently describe SQL injec...

CVE-2022-29007

Dairy Farm Shop Management System 1.0 is affected by multiple SQL injection flaws in the Admin panel’s username and password parameters, allowing authentication bypass. The Nuclei template and related reports describe exploitation that could enable data access, modification, and unauthorized admi...

CVE-2022-26931

CVE-2022-26931 is a Windows Kerberos elevation-of-privilege issue tied to certificate-to-account mapping changes in Active Directory. Microsoft KBs and Citrix documents describe remediation via certificate-mapping updates (e.g., KB5014754 and related out‑of‑band mitigations) to address how certif...

CVE-2022-26925

CVE-2022-26925 is a Windows Local Security Authority (LSA) spoofing vulnerability. The issue allows an unauthenticated attacker to coerce a domain controller to authenticate to the attacker using NTLM by calling a method on the LSARPC interface, enabling potential credential exposure in an NTLM-r...

CVE-2022-26923

CVE-2022-26923 affects Microsoft Active Directory Domain Services with AD CS involvement. The vulnerability stems from certificates issued by AD CS where an attacker who manages computer accounts can modify the dNSHostName attribute to impersonate a Domain Controller in a certificate, enabling pr...

CVE-2022-1453

The RSVPMaker WordPress plugin is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization in user-supplied data passed to a SQL query in rsvpmaker-util.php. This affects versions up to and including 9.2.5. Multiple connected sources confirm the flaw and its im...

CVE-2022-28912

CVE-2022-28912 affects TOTOLink N600R devices (firmware version V5.3c.7159_B20190425). The vulnerability is a command injection via the filename parameter in the /setting/setUpgradeFW API, caused by unsafely handling input. Reported impact in CVSS metrics is high/critical with network access, no ...

CVE-2022-28908

CVE-2022-28908 affects TOTOLink N600R router (firmware version V5.3c.7159_B20190425). A command injection vulnerability exists via the ipdoamin parameter in the /setting/setDiagnosisCfg endpoint, enabling remote code execution as described in multiple sources. The initial documents do not provide...

CVE-2022-28907

TOTOLink N600R (firmware ~5.3c.7159_B20190425) is affected by a command injection vulnerability in the hosttime function exposed via /setting/NTPSyncWithHost. The issue allows an attacker to inject and execute arbitrary commands on the device. Public sources do not provide an official patch detai...

CVE-2022-28906

Summary: CVE-2022-28906 affects TOTOLink N600R routers (V5.3c.7159_B20190425). A command-injection vulnerability exists in the /setting/setLanguageCfg API endpoint, exploitable via the langtype parameter. The issue allows an attacker to potentially execute arbitrary commands on the device, with n...

CVE-2022-0948

The CVE describes a SQL injection in the WordPress Order Listener for WooCommerce plugin prior to version 3.2.2. The vulnerability arises because the id parameter is not sanitized/escaped before being used in a SQL statement via an unauthenticated REST route, potentially enabling an attacker to r...

CVE-2022-0826

Summary: CVE-2022-0826 affects WordPress plugin WP Video Gallery (versions <= 1.7.1). The connected Nuclei template confirms a SQL injection vulnerability where the plugin fails to sanitize/escape a parameter before interpolating it into a SQL statement via an AJAX action. This allows unauthen...

CVE-2022-0592

CVE-2022-0592 affects the MapSVG WordPress plugin, specifically versions prior to 6.2.20. The vulnerability arises from the REST endpoint failing to validate and escape a parameter before it is used in a SQL statement, resulting in unauthenticated SQL Injection. Affected component: MapSVG WordPre...

CVE-2022-30333

CVE-2022-30333 affects RARLAB UnRAR on Linux/UNIX before 6.12, where a directory traversal during an extract can write arbitrary files (demonstrated by creating ~/.ssh/authorized_keys). The issue is confirmed across multiple sources (Astra Linux note mirrors the UnRAR pre-6.12 flaw; Debian LTS ad...

CVE-2022-28005

CVE-2022-28005 affects the 3CX Phone System Management Console prior to version 18 Update 3 FINAL on Windows. It allows an unauthenticated attacker to traverse the server via /Electron/download with backslash-using path components, leading to cleartext credential disclosure; a subsequent authenti...