{"vulnerability": "CVE-2022-3858", "sightings": [{"uuid": "08a0f30b-a401-4dea-96be-cabdf2b150f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14566", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38582\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write arbitrary files.\n\ud83d\udccf Published: 2022-11-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T18:54:16.136Z\n\ud83d\udd17 References:\n1. https://gist.github.com/420SmokeBigWeedHackBadDrivers/53de9ff97d95fc3e79307345fddb0a30", "creation_timestamp": "2025-05-02T19:16:12.000000Z"}, {"uuid": "663279cd-f99a-4b16-bf73-e55be9e7d50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38583", "type": "seen", "source": "https://t.me/cibsecurity/63046", "content": "\u203c CVE-2022-38583 \u203c\n\nOn versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a \"Windows Peer-to-Peer Network\" or \"Client Server Network\" configuration, a low-privileged Sage 300 workstation user could abuse their access to the \"SharedData\" folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T16:27:22.000000Z"}, {"uuid": "ab94f426-cf4c-407a-bb28-13681c0bf602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38580", "type": "seen", "source": "https://t.me/cibsecurity/52032", "content": "\u203c CVE-2022-38580 \u203c\n\nZalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-25T20:27:01.000000Z"}, {"uuid": "613c6af1-e68b-4d1d-92e1-8ff07d13553d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38582", "type": "seen", "source": "https://t.me/cibsecurity/52558", "content": "\u203c CVE-2022-38582 \u203c\n\nIncorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-04T15:28:01.000000Z"}, {"uuid": "c259c35a-fabd-4c1f-861e-1137af00538d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3858", "type": "seen", "source": "https://t.me/cibsecurity/54006", "content": "\u203c CVE-2022-3858 \u203c\n\nThe Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T20:21:01.000000Z"}]}