{"vulnerability": "CVE-2022-3404", "sightings": [{"uuid": "7ef05063-5a99-4c2f-aa4b-85f62645c951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3404", "type": "seen", "source": "https://t.me/cibsecurity/62012", "content": "\u203c CVE-2022-3404 \u203c\n\n** REJECT ** This candidate is unused by its CNA.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-13T00:24:20.000000Z"}, {"uuid": "0b7a5f88-fe18-4331-a341-afd805b22c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34049", "type": "seen", "source": "https://t.me/cibsecurity/46682", "content": "\u203c CVE-2022-34049 \u203c\n\nAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:05.000000Z"}, {"uuid": "6d8d7a09-9e1d-4ceb-9bb2-f80c7ba4548d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "seen", "source": "https://t.me/cibsecurity/46687", "content": "\u203c CVE-2022-34047 \u203c\n\nAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:10.000000Z"}, {"uuid": "b2eb53f6-5a6c-4399-b43e-d7c05d957b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/46693", "content": "\u203c CVE-2022-34046 \u203c\n\nAn access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:18.000000Z"}, {"uuid": "a39125e6-d515-40af-8b04-7c1e6d178416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34045", "type": "seen", "source": "https://t.me/cibsecurity/46692", "content": "\u203c CVE-2022-34045 \u203c\n\nWavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:16.000000Z"}, {"uuid": "27e6ffa3-b179-4c36-b5ed-0742abe66df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34048", "type": "seen", "source": "https://t.me/cibsecurity/46679", "content": "\u203c CVE-2022-34048 \u203c\n\nWavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:02.000000Z"}, {"uuid": "fe9dfe2a-9323-4460-8e48-e757f515b38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34042", "type": "seen", "source": "https://t.me/cibsecurity/46681", "content": "\u203c CVE-2022-34042 \u203c\n\nBarangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:03.000000Z"}, {"uuid": "ebdeb8e6-4760-46b9-9d7c-da4887455683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34043", "type": "seen", "source": "https://t.me/cibsecurity/45361", "content": "\u203c CVE-2022-34043 \u203c\n\nIncorrect permissions for the folder C:\\ProgramData\\NoMachine\\var\\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-29T17:23:28.000000Z"}, {"uuid": "82b0b593-35d3-4c8c-a8d8-1aac6ea4cc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34048", "type": "seen", "source": "https://t.me/hacking_Attack/63899", "content": "Exploit Collector\nWavlink WN533A8 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWavlink WN533A8 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 48c5e34195262eb0f79803e13d423ea91d98f8a27b6999d304b3fe1661f90c4d\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34048\n# Tested on: Windows\n\n# Poc code\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.687962Z"}, {"uuid": "55953e01-0f30-4684-b3e6-5326958b0ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "seen", "source": "https://t.me/hacking_Attack/63903", "content": "Exploit Collector\nWavlink WN530HG4 Password Disclosure\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nWavlink WN530HG4 suffers from a password disclosure vulnerability.\n\nSHA-256 | 72bebf711fd5631d66be1c8329d791b3ee2a850669d29bee1a9d8e5eee53001d\n\nDownload\n# Exploit Title: Wavlink WN530HG4 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M30HG4.V5030.191116\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34047\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_address/set_safety.shtml?r=52300\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.470976Z"}, {"uuid": "6de13bba-c71e-4c4b-a98e-56c9917d0256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "seen", "source": "https://t.me/hacking_Attack/63905", "content": "Exploit Collector\nWavlink WN533A8 Password Disclosure\n\nhttps://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png \nWavlink WN533A8 suffers from a password disclosure vulnerability.\n\nSHA-256 | 967e5d9bb7ba8f3b7aa6e0aab945794d32a8865342b72750bf2c2d2ff1033839\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34046\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_ADDRESS/sysinit.shtml\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.507081Z"}, {"uuid": "caff56ea-6fff-47ef-9827-63585401119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34048", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63899", "content": "Exploit Collector\nWavlink WN533A8 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWavlink WN533A8 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 48c5e34195262eb0f79803e13d423ea91d98f8a27b6999d304b3fe1661f90c4d\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34048\n# Tested on: Windows\n\n# Poc code\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.398706Z"}, {"uuid": "78416baa-20c1-4892-8a1e-44f95e6ebf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63905", "content": "Exploit Collector\nWavlink WN533A8 Password Disclosure\n\nhttps://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png \nWavlink WN533A8 suffers from a password disclosure vulnerability.\n\nSHA-256 | 967e5d9bb7ba8f3b7aa6e0aab945794d32a8865342b72750bf2c2d2ff1033839\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34046\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_ADDRESS/sysinit.shtml\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.484943Z"}, {"uuid": "9af29fad-177e-44b6-9b04-8629e549b88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63903", "content": "Exploit Collector\nWavlink WN530HG4 Password Disclosure\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nWavlink WN530HG4 suffers from a password disclosure vulnerability.\n\nSHA-256 | 72bebf711fd5631d66be1c8329d791b3ee2a850669d29bee1a9d8e5eee53001d\n\nDownload\n# Exploit Title: Wavlink WN530HG4 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M30HG4.V5030.191116\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34047\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_address/set_safety.shtml?r=52300\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.520100Z"}]}