81 matches found
CVE-2026-0535
creationtimestamp| type| source ---|---|--- 2026-01-22 19:24:00+00:00| seen| Telegram/JvdqABuEPm4MmITV1epb9Z-coYWnwH09RWzf-G-nIWlpd6E...
EUVD-2011-0923
Malware in sbrugna...
EUVD-2014-0565
Malware in sbrugna...
CVE-2023-0535
creationtimestamp| type| source ---|---|--- 2025-03-11 04:41:13+00:00| seen| Telegram/Zb3ib3mfCdi-7lB8SDKP9FMa4-TYZbpQuB8DqH6x1dbi6-C...
CVE-2025-0535
Codezips Gym Management System 1.0 is affected by a SQL injection in /dashboard/admin/edit_mem_submit.php via the uid parameter. The vulnerability’s root cause is unvalidated uid allowing attacker-controlled input to influence SQL queries. The CVE notes remote exploitation and public disclosure. ...
CVE-2025-0535 Codezips Gym Management System edit_mem_submit.php sql injection
A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/editmemsubmit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2024-0535
creationtimestamp| type| source ---|---|--- 2024-01-15 04:26:33+00:00| seen| https://t.me/ctinow/168140 2024-02-03 09:46:29+00:00| seen| https://t.me/ctinow/178449...
CVE-2024-0535
CVE-2024-0535 affects Tenda PA6 1.0.1.21, specifically the httpd/portmap component. The vulnerability is in cgiPortMapAdd of /portmap, where improper validation of the groupName parameter leads to a stack-based buffer overflow. It can be triggered remotely, and public exploit information has been...
Important Photon OS Security Update - PHSA-2023-4.0-0535
Updates of 'glibc' packages of Photon OS have been released...
Rocky Linux 8 : thunderbird (RLSA-2022:0535)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0535 advisory. - If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants...
WordPress Donation Block For PayPal Plugin < 2.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Donation Block For PayPal Type Plugin Vulnerable versions 2.1.0 Fixed in 2.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0535 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b8d846d35c7d Credits Lana Codes...
CVE-2023-0535
The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2023-0535
The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2023-0535
CVE-2023-0535 concerns the WordPress plugin “Donation Block For PayPal”. Before version 2.1.0, the plugin does not validate or escape certain shortcode attributes, allowing a user with Contributor+ privileges to induce Stored Cross-Site Scripting by outputting untrusted attributes into a page or ...
K06015902: Intel AMT vulnerabilities CVE-2020-0531, CVE-2020-0532, and CVE-2020-0535
Security Advisory Description CVE-2020-0531 Improper input validation in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access. CVE-2020-0532 Improper input validation in subsystem for...
CVE-2022-0535
WordPress E2Pdf plugin prior to 1.16.45 is affected. The vulnerability is a Cross-Site Scripting flaw caused by insufficient sanitization/escaping of certain settings, allowing an attacker to inject scripts in the context of authenticated users even when unfiltered_html is disallowed. Impact coul...
CentOS 8 : thunderbird (CESA-2022:0535)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:0535 advisory. - Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 - Mozilla: Drag and dropping an image could have resulte...
Oracle Linux 8 : thunderbird (ELSA-2022-0535)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0535 advisory. 91.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.6.0-1 - Update to 91.6.0 build1 Tenable has...
RHEL 8 : thunderbird (RHSA-2022:0535)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0535 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.6.0. Security Fixes: Mozilla:...
Mageia: Security Advisory (MGASA-2014-0261)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...