Nxq

Researcher fromNCSC of Vietnam
#9694of 60,450
32.9Total CVSS
Vulnerabilities · 4
High
3
Critical
1
PT-2022-25369
2022-11-14
7.5
CVE-2022-40405
Unknown
Wowonder Social Network Platform
The issue is related to a SQL injection vulnerability. It can be exploited via the `offset` parameter at the "requests.php?f=load-my-blogs" endpoint.
PT-2022-26694
2022-11-14
9.8
CVE-2022-42984
Unknown
Wowonder Social Network Platform
The issue is related to a SQL injection vulnerability. It can be exploited via the `offset` parameter at the "requests.php?f=search&s=recipients" endpoint.
PT-2021-10909
2021-12-15
7.8
CVE-2020-23545
Irfan Skiljan
Irfanview
The issue allows a user-mode write access violation. This occurs at the FORMATS!ReadXPM W+0x0000000000000531 location.
PT-2021-10910
2021-10-28
7.8
CVE-2020-23546
Irfanview
Irfanview
The issue allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file. This is related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call" starting at `FORMATS!ReadMosaic+0x0000000000000981`.