CVE-2019-10656

creationtimestamp| type| source ---|---|--- 2026-07-08 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq53gdultz2k...

CVE-2020-10656

The Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. Th...

CVE-2019-10656

Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply updatendswebrootfromtmp API call...

CVE-2024-10656 Tongda OA 2017 apply.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mrid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...

CVE-2024-10656 Tongda OA 2017 apply.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mrid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...

CVE-2020-10656

creationtimestamp| type| source ---|---|--- 2021-01-06 16:39:17+00:00| seen| https://t.me/cibsecurity/21659...

CVE-2020-10656

The CVE-2020-10656 entry concerns the Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to version 7.9.1. A vulnerability exists in the ITM application server’s WriteWindowMouseWithChunksV2 API caused by improper deserialization, enabling an anonymous remote attacker t...

CVE-2019-10656

Summary: CVE-2019-10656 affects Grandstream GWN7000 prior to 1.0.6.32. Affected component is the /ubus/uci.apply update_nds_webroot_from_tmp API call, where remote authenticated users can inject shell metacharacters in a filename to execute arbitrary code on the device. Public references across d...

CVE-2017-10656

...

CVE-2017-10656

CVE-2017-10656 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-10656

The provided documents confirm that qbs vulnerably downloads binary resources over HTTP, enabling a potential MITM attacker on the network to swap the requested binary with a malicious one and possibly execute code on the host. The risk is described as remote code execution under network-position...