85 matches found
CVE-2026-0863
creationtimestamp| type| source ---|---|--- 2026-01-18 16:51:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplmarbwo22 2026-01-18 16:52:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcplnbmisz2m 2026-01-18 16:53:03+00:00| seen|...
CVE-2026-0863 Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.
Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissio...
CVE-2023-0863
Improper Authentication vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox JP.This issue affects...
CVE-2022-0863
The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...
CVE-2019-0863
An elevation of privilege vulnerability exists in the way Windows Error Reporting WER handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'...
CVE-2025-0863
The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-0863
creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6802 2025-03-07 10:45:12+00:00| seen| https://t.me/cvedetector/19792...
CVE-2025-0863 Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2020-0863
creationtimestamp| type| source ---|---|--- 2024-10-21 16:23:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/945...
SUSE SLES12 Security Update : fontforge (SUSE-SU-2024:0863-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0863-1 advisory. - Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 - Splinefont in FontForge...
RHEL 8 : gimp:2.8 (RHSA-2024:0863)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0863 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...
CVE-2023-0863
creationtimestamp| type| source ---|---|--- 2023-05-17 12:31:10+00:00| seen| https://t.me/cibsecurity/64303 2025-01-22 17:01:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2576...
CVE-2023-0863 Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,
Improper Authentication vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox JP.This issue affects...
CVE-2023-0863
CVE-2023-0863 describes an improper authentication flaw in ABB Terra AC wallbox charging stations. The issue affects multiple models/firmware branches (UL40/80A, UL32A, CE/Terra AC MID, Juno CE, PTB, Symbiosis, JP) with affected ranges from 1.0.0 up to 1.5.5 (UL40/80A), 1.0.0 up to 1.6.5 (UL32A, ...
CVE-2023-0863 Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,
Improper Authentication vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox JP.This issue affects...
SUSE SLES15 Security Update : dpdk (SUSE-SU-2023:0863-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0863-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)
An arbitrary file upload vulnerability exists in WordPress SVG Icons plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2022-0863
The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...
CVE-2022-0863
The WP SVG Icons WordPress plugin (versions ≤ 3.2.3) is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded custom icon packs. An admin/high-privilege user can upload a ZIP containing malicious PHP code, leading to remote code execution. Publ...
CVE-2022-0863 WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...