154 matches found
CVE-2025-0781 Incorrect Authorization in SimGear
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...
CVE-2025-0781
CVE-2025-0781 affects SimGear/FlightGear: a Nasal scripting sandbox bypass enables writing to arbitrary files the user can modify. Public advisories (Ubuntu USN-7965-1 and Fedora FEDORA-2025-725bba93b2, related Nessus entries) indicate remediation via updates; descriptions also note potential arb...
CVE-2025-0781
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...
CVE-2025-0781 Incorrect Authorization in SimGear
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...
Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow', 'Description' = %q This module abuses a buffer overflow vulnerability to trigger a...
CVE-2024-0781
creationtimestamp| type| source ---|---|--- 2024-01-22 17:31:28+00:00| seen| https://t.me/ctinow/171316 2024-02-01 23:16:06+00:00| seen| https://t.me/ctinow/177815 2024-02-16 09:11:48+00:00| seen| https://t.me/ctinow/186196...
CVE-2024-0781
CVE-2024-0781 affects CodeAstro Internet Banking System 1.0, specifically an vulnerability in the pages_client_signup.php file where manipulating the Client Full Name parameter can trigger an open redirect. The issue is exploitable remotely and has been publicly disclosed (VDB-251697). Several co...
CVE-2024-0781 CodeAstro Internet Banking System pages_client_signup.php redirect
A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pagesclientsignup.php. The manipulation of the argument Client Full Name with the input leads to open redirect. It is possible to initiate the attack...
CVE-2023-0781
SourceCodester Canteen Management System version 1.0 contains a SQL injection vulnerability in the removeOrder.php file’s query function, caused by manipulation of the id parameter. This can be exploited remotely and is classified as critical by CVE-2023-0781, with high impact on confidentiality,...
CVE-2023-0781 SourceCodester Canteen Management System removeOrder.php query sql injection
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file removeOrder.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2022-0781
creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:38+00:00| seen| https://t.me/cibsecurity/43152 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-09...
CVE-2022-0781
The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an SQL injection...
CVE-2022-0781
CVE-2022-0781 affects the WordPress Nirweb Support plugin (versions before 2.8.2). The vulnerability is an SQL injection caused by inadequate sanitization/escaping of a parameter in an AJAX action, accessible to unauthenticated users. Exploitation could lead to unauthorized data access, data mani...
Yokogawa (CVE-2014-0781) (deprecated)
Plugin deprecated because centumcs is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...
SUSE: Security Advisory (SUSE-SU-2012:0411-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-0781
The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...
CVE-2019-0781
CVE-2019-0781 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2008-0781
Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 message, 2 pagename, and 3 target filenames...
CVE-2014-0781
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/scada/yokogawalogsvr.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:25+00:00| seen|...