81 matches found
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
CVE-2024-1026
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...
CVE-2020-1026
A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography ECC implementation.An attacker could potentially abuse these bugs to learn information about a server’s private ECC key a key...
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
CVE-2025-1026
CVE-2025-1026 affects the PHP package spatie/browsershot when using versions before 5.0.5. The issue is improper input/URL validation in setUrl, leading to Local File Inclusion and potential reading of sensitive files. This entry is noted as a bypass of the prior fix for CVE-2024-21549. Red Hat, ...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1026)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer
kygocera CVE-2022-1026 Improved Golang Version of Rapid7 PoC...
CVE-2024-1026 Cogites eReserv config.php cross site scripting
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...
CVE-2024-1026 Cogites eReserv config.php cross site scripting
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...
CVE-2024-1026
Cogites eReserv 7.7.58 is affected by a Cross-Site Scripting (XSS) vulnerability in front/admin/config.php, triggered by manipulating the id parameter to inject a script. The issue is exploitable remotely and the payload demonstrated in sources uses a script alert. Reported across multiple feeds ...
CVE-2024-1026
creationtimestamp| type| source ---|---|--- 2024-01-29 15:11:24+00:00| seen| https://t.me/ctinow/175289 2024-01-30 02:31:17+00:00| seen| https://t.me/ctinow/175659 2025-06-09 21:32:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17795...
PVS Configuration Wizard Crashes applying configuration
The PVS Configuration Wizard crashes and exits when applying configuration settings at the end of the wizard. This is visible in PVS Server application event logs, event IDs 1026 and 1000. Faulting application name ConfigWizard.exe...
CVE-2023-1026
creationtimestamp| type| source ---|---|--- 2023-02-28 16:29:21+00:00| seen| https://t.me/cibsecurity/59094...
CVE-2023-1026
Summary: CVE-2023-1026 affects the WP Meta SEO WordPress plugin (versions up to 4.5.3). The root cause is a missing capability check in the listPostsCategory function, causing unauthorized data access. The vulnerability arises because nonce-based access control was relied upon and the nonce was a...
SUSE CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...
Kyocera Printer Information Disclosure Vulnerability (Mar 2022) - Active Check
Kyocera printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-1026
creationtimestamp| type| source ---|---|--- 2022-04-04 18:27:52+00:00| seen| https://t.me/cibsecurity/40107 2023-03-29 22:41:31+00:00| seen| Telegram/ZeBKdDwAVYlC6iATLEpVgit-4tu7euW3W0HhHeJyFhbDNcY 2023-12-07 23:41:53+00:00| seen| https://t.me/arpsyndicate/1539 2025-01-24 00:00:00+00:00| seen| Th...
CVE-2022-1026
CVE-2022-1026 affects Kyocera multifunction printers running vulnerable Net View versions, where the address book export feature exposes user data (including usernames and passwords) due to insufficient access controls. The root cause is unprotected/exportable address book data, allowing unauthen...