Live-Hack-CVE/CVE-2022-39086 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:18:21 +0000 UTC Push: 2023-01-04 20:18:25 +0000 UTC |

Live-Hack-CVE/CVE-2022-39085 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:18:17 +0000 UTC Push: 2023-01-04 20:18:20 +0000 UTC |

Live-Hack-CVE/CVE-2022-39084 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:18:12 +0000 UTC Push: 2023-01-04 20:18:15 +0000 UTC |

Live-Hack-CVE/CVE-2022-39083 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:18:08 +0000 UTC Push: 2023-01-04 20:18:11 +0000 UTC |

Live-Hack-CVE/CVE-2022-39082 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:18:04 +0000 UTC Push: 2023-01-04 20:18:06 +0000 UTC |

Live-Hack-CVE/CVE-2022-39081 In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:17:59 +0000 UTC Push: 2023-01-04 20:18:02 +0000 UTC |

Live-Hack-CVE/CVE-2022-38684 In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:17:54 +0000 UTC Push: 2023-01-04 20:17:57 +0000 UTC |

Live-Hack-CVE/CVE-2022-38683 In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:17:50 +0000 UTC Push: 2023-01-04 20:17:53 +0000 UTC |

Live-Hack-CVE/CVE-2022-38682 In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:17:45 +0000 UTC Push: 2023-01-04 20:17:48 +0000 UTC |

Live-Hack-CVE/CVE-2022-38678 In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. CVE project by @Sn0wAlice Create: 2023-01-04 20:17:40 +0000 UTC Push: 2023-01-04 20:17:44 +0000 UTC |

Live-Hack-CVE/CVE-2020-36639 A vulnerability has been found in AlliedModders AMX Mod X and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amx_votemap leads to path traversal. The name of the patch is a5f2b5539f6d CVE project by @Sn0wAlice Create: 2023-01-04 20:17:36 +0000 UTC Push: 2023-01-04 20:17:39 +0000 UTC |

Live-Hack-CVE/CVE-2019-25094 A vulnerability, which was classified as problematic, was found in innologi appointments Extension up to 2.0.5. This affects an unknown part of the component Appointment Handler. The manipulation of the argument formfield leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to versio CVE project by @Sn0wAlice Create: 2023-01-04 20:17:32 +0000 UTC Push: 2023-01-04 20:17:34 +0000 UTC |

Live-Hack-CVE/CVE-2016-15008 A vulnerability was found in oxguy3 coebot-www and classified as problematic. This issue affects the function displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoir of the file js/channel.js. The manipulation leads to cross site scripting. The attack may be initiated CVE project by @Sn0wAlice Create: 2023-01-04 20:17:27 +0000 UTC Push: 2023-01-04 20:17:30 +0000 UTC |

Live-Hack-CVE/CVE-2014-125039 A vulnerability, which was classified as problematic, has been found in kkokko NeoXplora. Affected by this issue is some unknown functionality of the component Trainer Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dce1aecd6ee050a29f953ffd8f02f21c7 CVE project by @Sn0wAlice Create: 2023-01-04 20:17:22 +0000 UTC Push: 2023-01-04 20:17:25 +0000 UTC |

Live-Hack-CVE/CVE-2010-10003 A vulnerability classified as critical was found in gesellix titlelink. Affected by this vulnerability is an unknown functionality of the file plugin_content_title.php. The manipulation of the argument phrase leads to sql injection. The name of the patch is b4604e523853965fa981a4e79aef4b554a535db0. It is recommended to CVE project by @Sn0wAlice Create: 2023-01-04 20:17:17 +0000 UTC Push: 2023-01-04 20:17:20 +0000 UTC |

ajith737/Dirty-Pipe-CVE-2022-0847-POCs Create: 2023-01-04 20:17:12 +0000 UTC Push: 2023-01-04 20:17:14 +0000 UTC |

Live-Hack-CVE/CVE-2022-46081 In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. CVE project by @Sn0wAlice Create: 2023-01-04 14:48:40 +0000 UTC Push: 2023-01-04 14:48:43 +0000 UTC |

stephenbradshaw/CVE-2022-46164-poc Basic POC exploit for CVE-2022-46164 Create: 2023-01-04 12:17:30 +0000 UTC Push: 2023-01-04 12:17:31 +0000 UTC |

Live-Hack-CVE/CVE-2022-42710 Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS). CVE project by @Sn0wAlice Create: 2023-01-04 10:17:02 +0000 UTC Push: 2023-01-04 10:17:04 +0000 UTC |

Live-Hack-CVE/CVE-2022-44036 ** DISPUTED ** In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue and if you don't like that feature it is very obvious how to disabl CVE project by @Sn0wAlice Create: 2023-01-04 10:16:58 +0000 UTC Push: 2023-01-04 10:17:01 +0000 UTC |