101 matches found
CVE-2025-0959
The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2025-0959
creationtimestamp| type| source ---|---|--- 2025-03-07 08:34:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6810 2025-03-07 10:01:20+00:00| seen| Telegram/n12tkstpTBiha-g5cLpVGt34jbEMyCrF8bAKommPgu2Wg4 2025-03-07 11:49:00+00:00| seen|...
CVE-2025-0959 Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2025-0959 Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the regid parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2023-0959
creationtimestamp| type| source ---|---|--- 2025-02-14 10:09:22+00:00| seen| Telegram/qt5pNLZnlXO2TAs-200UdBk1eZdn6aaU3LM14eZkr3PzHgF...
RHSA-2024:0959
creationtimestamp| type| source ---|---|--- 2024-02-28 18:22:25+00:00| seen| https://t.me/ctinow/195723...
RHEL 8 : thunderbird (RHSA-2024:0959)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0959 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fixes: Mozilla:...
CVE-2024-0959
creationtimestamp| type| source ---|---|--- 2024-01-27 12:26:23+00:00| seen| https://t.me/ctinow/174746 2024-02-19 23:32:04+00:00| seen| https://t.me/ctinow/187979...
CVE-2024-0959
CVE-2024-0959 affects StanfordVL GibsonEnv 0.3.1. The vulnerability is triggered in the cloudpickle.load call within gibson/utils/pposgd_fuse.py, enabling deserialization. Reports consistently describe remote exploitation with high impact across confidentiality, integrity, and availability. Explo...
CVE-2023-0959
Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the application via a malicious link sent to an administrator. This is possible because the application is vulnerable to CSRF...
CVE-2023-0959
CVE-2023-0959 affects Bhima v1.27.0, where a remote attacker can cause privilege escalation by delivering a malicious link to an administrator, exploiting a CSRF vulnerability. The attack requires user interaction from an administrator (per CVSS: UI:R) and results in updating privileges for any r...
RHEL 9 : tar (RHSA-2023:0959)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0959 advisory. The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: heap buffer overflow at fromheader ...
Oracle Linux 9 : tar (ELSA-2023-0959)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-0959 advisory. - Fix CVE-2022-48303 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...
openSUSE: Security Advisory for pgadmin4 (SUSE-SU-2022:1541-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2022:1541-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:1541-1 Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2022-0959: Fixed an unrestricted file upload bsc1197143...
CVE-2022-0959
CVE-2022-0959 affects pgAdmin4: a malicious, authenticated user can craft an HTTP request using an existing CSRF token and session cookie to upload files to any location writable by the OS user running pgAdmin. The root cause is an unrestricted file upload path that permits writes outside intende...
CVE-2021-0959
creationtimestamp| type| source ---|---|--- 2022-01-14 22:23:39+00:00| seen| https://t.me/cibsecurity/35599...
CVE-2021-0959
CVE-2021-0959 is a local elevation-of-privilege vulnerability in Android 12 affecting jit_memory_region.cc. The flaw enables bypassing memory restrictions due to a logic error, allowing a local attacker to gain higher privileges without user interaction. Exploitation is described as requiring loc...
SUSE: Security Advisory (SUSE-SU-2016:0959-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...