CVE-2017-0149

creationtimestamp| type| source ---|---|--- 2017-05-13 18:29:01+00:00| seen| https://t.me/webamoozir/1775 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 23:27:03+00:00| seen| https://t.me/arpsyndicate/1332 2024-12-24 20:31:25+00:00| seen|...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4885

CVE-2016-4885 is a cross-site request forgery (CSRF) vulnerability in baserCMS and its Feed plugin (version 3.0.10 and earlier). When the Feed plugin is enabled, a logged-in administrator who visits a malicious URL can be forced to perform unintended operations on the baserCMS server, hijacking a...

CVE-2016-4885: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2017-8582

Name of the Vulnerable Software and Affected Versions baserCMS plugin Feed versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. This is achieved via unspecified vectors. Recommendations For baserCMS...

CVE-2017-6862

creationtimestamp| type| source ---|---|--- 2017-05-11 18:16:06+00:00| seen| https://t.me/webamoozir/1752 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 12:33:51+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:03+00:00| seen...

CVE-2017-0263

creationtimestamp| type| source ---|---|--- 2017-05-09 18:26:18+00:00| seen| MISP/59120865-27e0-4e6d-9b74-4a9f950d210f 2017-05-20 11:22:46+00:00| seen| https://t.me/canyoupwnme/1426 2018-02-21 07:47:18+00:00| seen| MISP/5a8d2377-208c-4330-908f-4818950d210f 2018-04-13 13:08:50+00:00|...

Mozilla: Sandbox escape through internal feed reader APIs (MFSA 2017-12)

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...

CVE-2017-5455

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...

CVE-2017-5455

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...

PT-2017-16512

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.1 Firefox versions prior to 53 Description The issue allows for a sandbox escape and escalation of privilege when combined with another vulnerability that results in remote code execution inside the sandboxed...

Update for Windows Server 2008 and Windows Vista (KB3217877)

Update for Windows Server 2008 and Windows Vista KB3217877 Issues that are fixed This update fixes the following issue: When you use the fre ad function to read data from a pipe in Windows Vista Service Pack 2, the runtime program may omit line feed LF characters between lines and cause corrupted...

ansa.it XSS vulnerability

Vulnerable URL: https://www.ansa.it/utilities/addrss.jsp?title==/europa/notizie/rss.xml...

CVE-2017-3881

creationtimestamp| type| source ---|---|--- 2017-03-29 08:04:52+00:00| seen| https://t.me/webamoozir/1465 2017-04-10 10:20:32+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1171 2017-04-12 14:54:05+00:00| published-proof-of-concept| https://t.me/HackerOne/616 2018-05-29 15:50:33+00:0...

CVE-2017-0005

creationtimestamp| type| source ---|---|--- 2017-03-27 21:05:07+00:00| exploited| https://t.me/BleepingComputer/907 2021-02-24 13:48:45+00:00| exploited| https://t.me/truesecator/1461 2021-03-01 11:00:27+00:00| seen| https://t.me/CyberSecurityTechnologies/2807 2023-06-14 21:10:03+00:00| seen|...

gitlab -- Various security issues

GitLab reports: Information Disclosure in Issue and Merge Request Trackers During an internal code review a critical vulnerability in the GitLab Issue and Merge Request trackers was discovered. This vulnerability could allow a user with access to assign ownership of an issue or merge request to...

GLSA-201702-26 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-26 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A local attacker, who either is already Nagioss system us...

CVE-2016-6189: Incomplete List of Disallowed Inputs

Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the 1 ics or 2 XML calendar feeds...