16 matches found
CVE-2026-10653
creationtimestamp| type| source ---|---|--- 2026-06-30 18:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjljaqkzx2z...
CVE-2025-10653
An unauthenticated debug port may allow access to the device file system...
CVE-2019-10653
An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...
CVE-2024-10653
creationtimestamp| type| source ---|---|--- 2024-11-01 12:10:16+00:00| seen| https://t.me/cvedetector/9571...
CVE-2024-10653
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server...
CVE-2024-10653 CHANGING Information Technology IDExpert - OS Command Injection
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server...
Citrix XenMobile XML External Entity Injection (CVE-2018-10653)
An XML External Entity Injection vulnerability exists in Citrix XenMobile Server. Successful exploitation of this vulnerability could result in unauthorized access to critical data in Citrix XenMobile Server...
Citrix XenMobile Server 10.8 XML Injection
Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8 before RP2 and 10.7 before RP3 Tested on: XenMobile CVE :...
Citrix XenMobile Server 10.8 - XML External Entity Injection
Citrix XenMobile Server 10.8 - XML External Entity Injection Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8...
Citrix XenMobile Server 10.8 - XML External Entity Injection
Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection Google Dork: inurl:zdm logon Date: 2019-11-28 Exploit Author: Jonas Lejon Vendor Homepage: https://www.citrix.com Software Link: Version: XenMobile Server 10.8 before RP2 and 10.7 before RP3 Tested on: XenMobile CVE :...
CVE-2019-10653
Hsycms v1.1 contains a SQL injection vulnerability in the /news/*.html page. The root cause is unsanitized/externally entered SQL statements in the database-layer handling of news pages (per CNVD/Red Hat/CVE descriptions). Exploitation could compromise data confidentiality, integrity, and availab...
CVE-2017-10653
CVE-2017-10653 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2016-10653
CVE-2016-10653 concerns the xd-testing package, where the library downloads binary resources over HTTP. The root issue is insecure HTTP transfer of executables, enabling a network-position attacker to intercept the response and replace the binary, potentially leading to remote code execution on t...
CVE-2018-10653
CVE-2018-10653 is an XML External Entity (XXE) processing vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. Connected advisories confirm an XXE injection flaw could lead to unauthorized access to critical data, with Citrix releasing Rolling Patch 2 (for 10.8) and Rolli...
eFront 3.6.9 - 'submitScore.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...