CVE-2026-1114

In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON Web Tokens JWT. This vulnerability allows an attacker to perform an offline brute-force attack to recover the secret key. Once the...

CVE-2026-1114

creationtimestamp| type| source ---|---|--- 2026-04-07 07:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116362132042797237 2026-04-07 09:15:25+00:00| seen| Telegram/UjrnvOa2JLE3qzXsFYe7vk49vQcInvR-SenKatBboIQ7n94 2026-04-07 09:32:19+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2022-1114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a...

CVE-2008-1114

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

CVE-2025-1114

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack...

CVE-2025-1114

creationtimestamp| type| source ---|---|--- 2025-02-07 22:36:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113964993951553846 2025-02-07 23:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmq6qbff227 2025-02-08 01:04:01+00:00|...

CVE-2025-1114

CVE-2025-1114 affects newbee-mall 1.0. The vulnerability resides in the Save function of /admin/categories/save (Add Category Page). Manipulating the categoryName parameter triggers cross-site scripting. The issue is exploitable remotely and the public exploit is available per the description. Th...

CVE-2025-1114 newbee-mall Add Category Page save cross site scripting

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack...

CVE-2024-1114

creationtimestamp| type| source ---|---|--- 2024-01-31 21:22:08+00:00| seen| https://t.me/ctinow/177109 2024-02-22 15:12:31+00:00| seen| https://t.me/ctinow/190781...

CVE-2024-1114

OpenBI up to 1.0.8 has a vulnerability in the dlfile function within /application/index/controller/Screen.php. The issue stems from manipulating the fileUrl argument, causing improper access controls that can be triggered remotely. Public exploit information exists. Several connected sources corr...

CVE-2024-1114 openBI Screen.php dlfile access control

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. The attack can be initiated remotely. T...

CVE-2017-1114

creationtimestamp| type| source ---|---|--- 2023-05-05 06:14:21+00:00| seen| https://t.me/cibsecurity/64...

Debian: Security Advisory (DSA-2189-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1114

CVE-2023-1114 affects Eskom e-Belediye (versions 1.0.0.95 through 1.0.0.100). Root cause is Missing Authorization, enabling Information Elicitation. Impact is high confidentiality/integrity/availability risks per sources, with CVSS v3.1 base score 9.8 (Network, Low attack complexity, No privilege...

SUSE CVE-2022-1114

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service...

Mageia: Security Advisory (MGASA-2022-0446)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1114

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service...

CVE-2022-1114

CVE-2022-1114 is a heap-use-after-free in ImageMagick’s RelinquishDCMInfo() (dcm.c) triggered by specially crafted DICOM images, potentially enabling information disclosure and denial of service. Public details across connected records confirm the affected component (ImageMagick), vulnerability t...

CVE-2021-1114

CVE-2021-1114 affects NVIDIA Linux kernel distributions via the kernel crypto node vulnerable to a use-after-free, leading to denial of service. Affected component is the kernel crypto node within Jetson/Linux kernel space. Impact is denial of service (availability) with no confidentiality or int...