CVE-2022-38627: A journey through SQLite Injection to compromise the whole enterprise building

Introduction:

In this research, I will show you how I managed to find this critical 0-day that allows me to control the entire enterprise building (doors, cameras, elevators, etc… ) in addition to that, I can collect employee data and add new employees who have permission to access the enterprise building, all of this is besides to the natural impact of a critical SQL injection vulnerability

Actually, in this research, you will see the implementation of hacking movies scenes but …

bug bounty compromise cve cybersecurity enterprise injection security sqlite static analysis zero-day