92 matches found
Apache Struts forced double OGNL evaluation
Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785...
be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0 <=2.0.8) +214 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.0.11 <=2.3.20.1)
org.apache.struts:struts2-core MAVEN version =2.0.11, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =0.5.9, =1.2.0, =1.0.0, =1.2.6 and more Source cves: CVE-2016-0785 Source advisory: OSV:GHSA-876P-4WGC-75RX...
com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2 <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2 <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24 <=2.3.24.1)
org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: OSV:GHSA-876P-4WGC-75RX...
CVE-2022-0785
creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:45+00:00| seen| https://t.me/cibsecurity/41060 2026-03-12 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd37p3a2q 2026-05-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...
CVE-2022-0785 Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...
CVE-2022-0785
The CVE-2022-0785 vulnerability affects the WordPress Daily Prayer Time plugin prior to 2022.03.01. The issue arises because the plugin does not sanitize or escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action, which is accessible to unauthentica...
CVE-2009-0785
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2019:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:0785-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
reportallusa.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1165188 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-0785
CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...
CVE-2020-0785
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...
Microsoft Windows Server Memory Corruption (CVE-2019-0785)
A memory corruption vulnerability exists in Microsoft Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2012-0785
creationtimestamp| type| source ---|---|--- 2020-02-24 20:37:19+00:00| seen| https://t.me/cibsecurity/10048...
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...
CVE-2012-0785
Jenkins Hash DoS (CVE-2012-0785): Affected products are Jenkins versions before 1.447, LTS before 1.424.2, and CloudBees Enterprise 1.424.x before 1.424.2.1 or 1.400.x before 1.400.0.11. The vulnerability involves a hash collision that could allow remote attackers to cause substantial CPU load. N...
CVE-2019-0785
CVE-2019-0785 is a memory-corruption vulnerability in the Microsoft Windows Server DHCP service that can allow remote code execution when an attacker sends specially crafted packets to a DHCP failover server. Affected product: Windows Server DHCP service. Root cause: memory corruption inside the ...
Patch Tuesday Lowdown, July 2019 Edition
Microsoft today released software updates to plug almost 80 security holes in its Windows operating systems and related software. Among them are fixes for two zero-day flaws that are actively being exploited in the wild, and patches to quash four other bugs that were publicly detailed prior to...