Vulnerability

Researchers have developed CVE-2022-40684 PoC exploit code

Do Son October 10, 2022 2 minutes read

Image: Horizon3Attack

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: CVE-2022-40684 CVE-2022-40684 PoC

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2012-20005CVSS 5.1
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20101CVSS 9.2
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20097CVSS 8.7
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2026-102785CVSS 10.0
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible...
Admin intel📅 Updated: Oct 27, 2026
CVE-2026-48356CVSS 9.3
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in...
CISA KEV📅 Added to KEV: Oct 27, 2026

CVE-2026-110879CVSS 9.8
jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments,...
📅 Updated: Oct 28, 2026
CVE-2026-58256CVSS 9.1
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can...
📅 Updated: Oct 27, 2026
CVE-2024-51092CVSS 9.1
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(),...
📅 Updated: Oct 27, 2026
CVE-2026-91656CVSS 9.1
Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability...
📅 Updated: Oct 27, 2026
CVE-2026-71195CVSS 9.9
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller...
📅 Updated: Oct 27, 2026
CVE-2026-114108CVSS 9.3
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the...
📅 Updated: Oct 27, 2026
CVE-2026-114053CVSS 9.2
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of...
📅 Updated: Oct 27, 2026
CVE-2026-116692CVSS 9.8
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
📅 Updated: Oct 27, 2026

🔐 Access to This Vulnerability Report Requires Support

Get Zero-Hour Vulnerability Alerts

Do Son