CVE-2022-43709 The Admin CP's Users module has a SQL injection vulnerability that allows remote users to modify the query string.
The SQL query string is sanitized before being sent to the database, but if an attacker could control the input to the query, it could
CVE-2022-44830 - CSV Injection in Sourcecodester Event Registration App v1. — Exploit Details and Code Walkthrough
Recently, security researchers discovered several dangerous CSV injection (a.k.a. formula injection) vulnerabilities in the Sourcecodester Event Registration App v1., publicly identified as CVE-2022-44830.
CVE-2022-40746 - How Attackers Can Run Arbitrary Code via DLL Search Order Hijacking in IBM i Access Family (with Exploit Example)
CVE-2022-40746 is a dangerous vulnerability found in IBM i Access Family versions 1.1.2 through 1.1.4, and 1.1.4.3 through
CVE-2022-45422 - Local Privilege Escalation in LG SmartShare via DLL Hijacking (LVE-HOT-220005)
LG SmartShare is a popular application bundled with many LG laptops and TVs. It allows users to wirelessly share files and media across devices. However,
CVE-2022-41939 The kub::func library and CLI enables development and deployment of Kubernetes functions.
Function is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose
Episode
00:00:00
00:00:00