Live-Hack-CVE/CVE-2023-0613 A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation of the argument device_web_ip leads to memory corruption. The attack can be launched remotely. CVE project by @Sn0wAlice Create: 2023-02-01 23:52:07 +0000 UTC Push: 2023-02-01 23:52:10 +0000 UTC |

Live-Hack-CVE/CVE-2023-0612 A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp of the component httpd. The manipulation of the argument device_web_ip leads to buffer overflow. It is possible to launch the attack remotely. The exploit has bee CVE project by @Sn0wAlice Create: 2023-02-01 23:52:03 +0000 UTC Push: 2023-02-01 23:52:06 +0000 UTC |

Live-Hack-CVE/CVE-2023-0611 A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclose CVE project by @Sn0wAlice Create: 2023-02-01 23:51:59 +0000 UTC Push: 2023-02-01 23:52:02 +0000 UTC |

Live-Hack-CVE/CVE-2022-47717 Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS). CVE project by @Sn0wAlice Create: 2023-02-01 23:51:56 +0000 UTC Push: 2023-02-01 23:51:58 +0000 UTC |

Live-Hack-CVE/CVE-2022-47715 In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic. CVE project by @Sn0wAlice Create: 2023-02-01 23:51:52 +0000 UTC Push: 2023-02-01 23:51:54 +0000 UTC |

Live-Hack-CVE/CVE-2022-47714 Last Yard 22.09.8-1 does not enforce HSTS headers CVE project by @Sn0wAlice Create: 2023-02-01 23:51:48 +0000 UTC Push: 2023-02-01 23:51:50 +0000 UTC |

Live-Hack-CVE/CVE-2022-47003 A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request. CVE project by @Sn0wAlice Create: 2023-02-01 23:51:44 +0000 UTC Push: 2023-02-01 23:51:47 +0000 UTC |

Live-Hack-CVE/CVE-2022-47002 A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request. CVE project by @Sn0wAlice Create: 2023-02-01 23:51:40 +0000 UTC Push: 2023-02-01 23:51:43 +0000 UTC |

Live-Hack-CVE/CVE-2022-41151 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data CVE project by @Sn0wAlice Create: 2023-02-01 23:51:37 +0000 UTC Push: 2023-02-01 23:51:39 +0000 UTC |

Live-Hack-CVE/CVE-2022-42378 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data CVE project by @Sn0wAlice Create: 2023-02-01 23:51:30 +0000 UTC Push: 2023-02-01 23:51:32 +0000 UTC |

Live-Hack-CVE/CVE-2022-42380 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data CVE project by @Sn0wAlice Create: 2023-02-01 23:51:25 +0000 UTC Push: 2023-02-01 23:51:27 +0000 UTC |

Live-Hack-CVE/CVE-2022-42382 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data CVE project by @Sn0wAlice Create: 2023-02-01 23:51:22 +0000 UTC Push: 2023-02-01 23:51:24 +0000 UTC |

Live-Hack-CVE/CVE-2022-42381 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data CVE project by @Sn0wAlice Create: 2023-02-01 23:51:18 +0000 UTC Push: 2023-02-01 23:51:20 +0000 UTC |

Live-Hack-CVE/CVE-2022-42384 This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Craf CVE project by @Sn0wAlice Create: 2023-02-01 23:51:13 +0000 UTC Push: 2023-02-01 23:51:15 +0000 UTC |

Live-Hack-CVE/CVE-2022-42383 This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Craf CVE project by @Sn0wAlice Create: 2023-02-01 23:51:09 +0000 UTC Push: 2023-02-01 23:51:11 +0000 UTC |

Live-Hack-CVE/CVE-2023-0610 Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. CVE project by @Sn0wAlice Create: 2023-02-01 21:37:35 +0000 UTC Push: 2023-02-01 21:37:38 +0000 UTC |

Live-Hack-CVE/CVE-2023-0609 Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. CVE project by @Sn0wAlice Create: 2023-02-01 21:37:30 +0000 UTC Push: 2023-02-01 21:37:34 +0000 UTC |

g1vi/CVE-2010-0426 sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 - Privilege escalation with sudo and sudoedit Create: 2023-02-01 19:39:17 +0000 UTC Push: 2023-02-01 19:39:18 +0000 UTC |

Live-Hack-CVE/CVE-2023-0608 Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. CVE project by @Sn0wAlice Create: 2023-02-01 19:24:24 +0000 UTC Push: 2023-02-01 19:24:26 +0000 UTC |

Live-Hack-CVE/CVE-2022-46679 Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service. CVE project by @Sn0wAlice Create: 2023-02-01 19:24:20 +0000 UTC Push: 2023-02-01 19:24:23 +0000 UTC |