CVE-2026-0954

creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhh45xuodo2x...

Important Photon OS Security Update - PHSA-2026-4.0-0954

Updates of 'python3-dnspython' packages of Photon OS have been released...

EUVD-2026-0954

In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267349; Issue ID: MSV-5033...

CVE-2021-0954

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID:...

CVE-2020-0954

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2012-0954

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle MITM attack. NOTE: this vulnerability exists...

CVE-2025-0954

creationtimestamp| type| source ---|---|--- 2025-03-05 09:36:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6524 2025-03-05 12:45:46+00:00| seen| https://t.me/cvedetector/19607...

CVE-2025-0954 WP Online Contract <= 5.1.4 - Missing Authorization to Unauthenticated Settings Import

The WP Online Contract plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the jsonimport and jsonexport functions in all versions up to, and including, 5.1.4. This makes it possible for unauthenticated attackers to import and export the plugin's setting...

CVE-2025-0954 WP Online Contract <= 5.1.4 - Missing Authorization to Unauthenticated Settings Import

The WP Online Contract plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the jsonimport and jsonexport functions in all versions up to, and including, 5.1.4. This makes it possible for unauthenticated attackers to import and export the plugin's setting...

CVE-2025-0954

CVE-2025-0954 affects the WordPress plugin “WP Online Contract”. The vulnerability is a missing capability check in json_import() and json_export() across all versions up to 5.1.4, allowing unauthenticated attackers to import/export the plugin’s settings. Public sources in the provided documents ...

CVE-2023-0954

creationtimestamp| type| source ---|---|--- 2025-01-06 20:49:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/224...

Sensormatic Electronics Illustra Pro Gen 4 Active Debug Code (CVE-2023-0954)

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-2024-0954

creationtimestamp| type| source ---|---|--- 2024-02-29 16:21:47+00:00| seen| https://t.me/ctinow/196776...

RHSA-2024:0954

creationtimestamp| type| source ---|---|--- 2024-02-28 18:22:26+00:00| seen| https://t.me/ctinow/195724...

CVE-2024-0954

The CVE-2024-0954 entry concerns the WordPress plugin Essential Addons for Elementor (WPDeveloper). A Stored Cross-Site Scripting vulnerability exists in the editing context via the data-eael-wrapper-link wrapper, affecting all versions up to and including 5.9.7 due to insufficient input sanitiza...

CVE-2024-0954 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting through editing context via the 'data-eael-wrapper-link' wrapper in all versions up to, and including, 5.9.7 due to insufficient...

CVE-2023-0954 Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

CVE-2023-0954 Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

CVE-2023-0954

The CVE-2023-0954 vulnerability affects Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras (Dome up to Illustra.SS016.05.09.04.0006; PTZ up to Illustra.SS010.05.09.04.0022). A debug feature is improperly enabled on some devices, enabling credential compromise after a long period of s...

Rocky Linux 9 : systemd (RLSA-2023:0954)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0954 advisory. - A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suiddumpable...