zwxxb

3 exploits Active since Jan 2023
CVE-2025-1974 NOMISEC CRITICAL WORKING POC
Kubernetes ingress-nginx - Pod Network Remote Code Execution
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
7 stars
CVSS 9.8
CVE-2023-2215 NOMISEC MEDIUM WORKING POC
Campcodes Coffee Shop POS System 1.0 - SQL Injection via Manage User ID Parameter
A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226980.
4 stars
CVSS 6.3
CVE-2023-21887 NOMISEC MEDIUM WORKING POC
MySQL Server 8.0.0-8.0.31 - Authenticated Denial of Service in GIS Component
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
2 stars
CVSS 4.9