PoC Index85,101 CVEs with PoCs

CVE-2022-44006

CRITICAL 9.8EPSS 2.0%

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthenticated update function permits writing files outside the intended target location. Achieving remote code execution is possible, e.g., by uploading an executable file.

CVSS v3.1 NVD
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.03% chance of exploitation in the next 30 days, 81st percentile
Published
2022-11-16
Updated
2025-04-30

Proof-of-concept exploits (1)

Security advisories

References