109 matches found
wargame_Re-LS
CVE-2025-0184 DOCX SSRF CTF Challenge Quick Start 1. Setup and Build make setup make build 2. Start Services make up 3. Web Access open http://localhost:8080 Goal Access the internal Admin service port 3003 and obtain the flag! Expected Flag : CTFflagreadme Exploit cd exploits python3...
CVE-2016-0184
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:31+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 01:01:17+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:13+00:00| seen|...
CVE-2026-45644
creationtimestamp| type| source ---|---|--- 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 16:23:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184...
CVE-2026-47284
creationtimestamp| type| source ---|---|--- 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 16:23:58+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0184...
CVE-1999-0184
When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records...
Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government
The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives. "This organization has continued to conduct high-intensity intelligence gathering activities again...
EUVD-2026-0184
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2025-0184
creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8183 2025-03-20 13:13:23+00:00| seen| https://t.me/cvedetector/20726...
CVE-2025-0184
CVE-2025-0184 describes an SSRF in langgenius/dify around the DOCX upload in the Create Knowledge flow (v0.10.2). The vulnerability triggers when a DOCX’s external relationship uses a reltype value fetched via the requests module instead of the SSRF proxy, enabling an attacker with access to the ...
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify
A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...
UAC-0184 Strikes Ukraine with XWorm RAT
...
Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw
Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs...
CVE-2024-0184
creationtimestamp| type| source ---|---|--- 2024-01-02 01:26:32+00:00| seen| https://t.me/ctinow/161438 2024-01-02 01:31:50+00:00| seen| https://t.me/cibsecurity/74099 2024-01-08 21:17:14+00:00| seen| https://t.me/ctinow/164637 2024-01-22 13:41:26+00:00| seen| https://t.me/ctinow/171160 2024-01-2...
CVE-2024-0184
CVE-2024-0184 affects RRJ Nueva Ecija Engineer Online Portal 1.0, in the vulnerable file /admin/edit_teacher.php of the component Add Enginer. The issue is a cross-site scripting (XSS) vulnerability caused by manipulation of the Firstname/Lastname parameter, with remote exploitation and a publicl...
NVIDIA Linux GPU Display Driver (March 2023)
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, which may lead to code execution, denial of service,...
SUSE CVE-2007-0184
Getahead Direct Web Remoting DWR before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks...
SUSE CVE-2013-0184
Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."...
