CVE-2025-0994

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services I...

CVE-2025-0994

creationtimestamp| type| source ---|---|--- 2025-02-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04 2025-02-06 15:42:21+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113957702270079889 2025-02-06 16:02:54+00:00| seen|...

RHEL 6 : openstack-keystone (RHSA-2013:0994)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0994 advisory. The openstack-keystone packages provide Keystone, a Python implementation of the OpenStack identity service API, which provides Identity, Token,...

CVE-2024-0994

creationtimestamp| type| source ---|---|--- 2024-01-29 03:26:44+00:00| seen| https://t.me/ctinow/175052 2024-02-21 09:06:45+00:00| seen| https://t.me/ctinow/189359...

CVE-2024-0994 Tenda W6 httpd setcfm formSetCfm stack-based overflow

A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...

CVE-2024-0994

CVE-2024-0994 affects Tenda W6 1.0.0.9(4122). The httpd component’s /goform/setcfm formSetCfm function can be triggered via the funcpara1 parameter to cause a stack-based buffer overflow. Exploitation can be performed remotely, and public disclosures exist. Remediation/advisories in connected dat...

CVE-2023-0994

creationtimestamp| type| source ---|---|--- 2023-02-24 07:18:55+00:00| seen| https://t.me/cibsecurity/58846...

CVE-2023-0994

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...

CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...

CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...

CVE-2023-0994

The CVE-2023-0994 issue affects RosarioSIS (GitHub repo francoisjacquet/rosariosis) prior to version 10.8.2. The root cause is Exposure of Sensitive Information to an Unauthorized Actor, tied to improper access control and information disclosure. Multiple connected records confirm the same vulner...

CVE-2017-0994

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990,...

CVE-2022-0994

creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:58+00:00| seen| https://t.me/cibsecurity/41068...

CVE-2022-0994

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0994

CVE-2022-0994 : The WordPress Hummingbird plugin (versions Configs. Remediation: upgrade to version 3.3.2 or later. If upgrading isn’t possible, applying vendor-provided patches or mitigations per advisories is advised.

CVE-2022-0994 Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Hummingbird Plugin < 3.3.2 - Stored Cross-Site Scripting Vulnerability

Tittle: WordPress Plugin Hummingbird Configs edit the "Name and Description" and put the following payload in the Name field: Save and Click 'Apply' to trigger the XSS Go to Hummingbird's Settings Configs and Upload the following config "id": 1, "name": "", "description": "Xss", "config":...

WordPress Hummingbird Cross Site Scripting

Tittle: WordPress Plugin Hummingbird Configs edit the "Name and Description" and put the following payload in the Name field: Save and Click 'Apply' to trigger the XSS Go to Hummingbird's Settings Configs and Upload the following config "id": 1, "name": "", "description": "Xss", "config":...

CVE-2021-0994

CVE-2021-0994 corresponds to an Android information-disclosure flaw described across multiple sources (NVD, Red Hat RH-CVE, CNVD, OSV) where an attacker can infer if a target app is installed by exploiting a missing permission check in ConnectivityService.java (requestRouteToHostAddress). This ca...