104 matches found
CVE-1999-0184
When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records...
Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government
The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives. "This organization has continued to conduct high-intensity intelligence gathering activities again...
EUVD-2026-0184
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2025-0184
creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8183 2025-03-20 13:13:23+00:00| seen| https://t.me/cvedetector/20726...
CVE-2025-0184
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
CVE-2025-0184
CVE-2025-0184 describes an SSRF in langgenius/dify around the DOCX upload in the Create Knowledge flow (v0.10.2). The vulnerability triggers when a DOCX’s external relationship uses a reltype value fetched via the requests module instead of the SSRF proxy, enabling an attacker with access to the ...
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
UAC-0184 Strikes Ukraine with XWorm RAT
...
Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw
Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs...
CVE-2024-0184
creationtimestamp| type| source ---|---|--- 2024-01-02 01:26:32+00:00| seen| https://t.me/ctinow/161438 2024-01-02 01:31:50+00:00| seen| https://t.me/cibsecurity/74099 2024-01-08 21:17:14+00:00| seen| https://t.me/ctinow/164637 2024-01-22 13:41:26+00:00| seen| https://t.me/ctinow/171160 2024-01-2...
CVE-2024-0184
CVE-2024-0184 affects RRJ Nueva Ecija Engineer Online Portal 1.0, in the vulnerable file /admin/edit_teacher.php of the component Add Enginer. The issue is a cross-site scripting (XSS) vulnerability caused by manipulation of the Firstname/Lastname parameter, with remote exploitation and a publicl...
NVIDIA Linux GPU Display Driver (March 2023)
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, which may lead to code execution, denial of service,...
SUSE CVE-2007-0184
Getahead Direct Web Remoting DWR before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks...
SUSE CVE-2013-0184
Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."...
Important Photon OS Security Update - PHSA-2022-4.0-0184
Updates of 'git' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0184
Updates of 'git' packages of Photon OS have been released...
SUSE SLES15 Security Update : json-c (SUSE-SU-2022:0184-2)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0184-2 advisory. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762 Note...
Mageia: Security Advisory (MGASA-2013-0184)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0184)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...