{"vulnerability": "cve-2023-4402", "sightings": [{"uuid": "c2cd4a34-e1cd-42e4-9015-2fbab1f51f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-44025", "type": "seen", "source": "https://t.me/cibsecurity/73393", "content": "\u203c CVE-2023-44025 \u203c\n\nSQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T01:22:05.000000Z"}, {"uuid": "50e2a1d4-9f9a-4d41-be5a-d406775fa3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-44020", "type": "seen", "source": "https://t.me/cibsecurity/71106", "content": "\u203c CVE-2023-44020 \u203c\n\nTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-27T18:46:10.000000Z"}, {"uuid": "3d52737d-420d-4161-a072-9ad4b78ee2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-44024", "type": "seen", "source": "https://t.me/cibsecurity/71693", "content": "\u203c CVE-2023-44024 \u203c\n\nSQL injection vulnerability in KnowBand Module One Page Checkout, Social Login &amp; Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-06T00:12:56.000000Z"}, {"uuid": "8e995aa9-1303-4c37-ac0b-93843c7bd878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4402", "type": "seen", "source": "https://t.me/cibsecurity/72661", "content": "\u203c CVE-2023-4402 \u203c\n\nThe Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:35:21.000000Z"}, {"uuid": "4c768bb4-a73f-4319-a8b0-815e6ac1f08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-44023", "type": "seen", "source": "https://t.me/cibsecurity/71051", "content": "\u203c CVE-2023-44023 \u203c\n\nTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-27T19:33:52.000000Z"}, {"uuid": "b46d674a-8ab7-4453-a6db-10a95b967b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-44022", "type": "seen", "source": "https://t.me/cibsecurity/71104", "content": "\u203c CVE-2023-44022 \u203c\n\nTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-27T18:46:08.000000Z"}]}