CVE-2022-39289 ZoneMinder is a free, open source Closed-circuit television software application
ZM is a powerful CNC software that is often used for surveillance. It can monitor many different things like video feeds from security cameras, audio
CVE-2022-41378 The App v1.0 had a SQL injection vulnerability at /pet_shop/admin/?page=inventory/manage_inventory.
This can be exploited by entering specific sequences of characters that will execute SQL statements in the database. In most cases, the goal of an
CVE-2022-42074 The v1.0 of GED Diagnostic Lab Management System is vulnerable to SQL Injection.
A hacker can inject a SQL query to change the content of the database and steal critical information or even take over the system. A
CVE-2022-41514 The Open Source SACCO Management System v1.0 had a SQL injection vulnerability where users were able to delete loans.
If a user with lower privilege accesses this URL, the id parameter can be manipulated by an attacker to execute arbitrary SQL commands. SACCO Open
CVE-2022-41515 The Open Source SACCO Management System v1.0 had a SQL injection vulnerability with the id parameter.
A hacker can exploit this vulnerability to execute arbitrary SQL commands with the privileges of the user that installed the application. In a highly critical
Episode
00:00:00
00:00:00