EUVD-2026-1163

Panda3D versions up to and including 1.10.16 egg-mkfont contains an uncontrolled format string vulnerability. The -gp glyph pattern command-line option is used directly as the format string for sprintf with only a single argument supplied. If an attacker provides additional format specifiers,...

CVE-2022-1163

Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...

CVE-2020-1163

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2025-1163

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached...

CVE-2025-1163 code-projects Vehicle Parking Management System Authentication login stack-based overflow

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached...

Huawei EulerOS: Security Advisory for python-configobj (EulerOS-SA-2025-1163)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : kubernetes1.23 (SUSE-SU-2024:1163-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1163-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2024-1163

creationtimestamp| type| source ---|---|--- 2024-02-13 16:22:16+00:00| seen| https://t.me/ctinow/183928 2025-05-09 18:26:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15809...

@etalab/cadastre (>=0.14.0 <=0.21.0), @fmidev/smartmet-alert-client (>=3.0.0 <=3.8.8) +13 more potentially affected by CVE-2024-1163 via mapshaper (>=0.3.43 <=0.6.42)

mapshaper NPM version =0.3.43, =0.14.0, =3.0.0, =0.0.1, =0.1.9, =0.0.1, =0.0.3, =2.1.0, =1.3.1, =0.0.1, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2024-1163 Source advisory: OSV:GHSA-8M36-62RW-9MXW...

CVE-2024-1163 Path traversal vulnerability in mapshaper

The attacker may exploit a path traversal vulnerability leading to information disclosure...

CVE-2024-1163 Path traversal vulnerability in mapshaper

The attacker may exploit a path traversal vulnerability leading to information disclosure...

CVE-2024-1163

CVE-2024-1163 maps to a path traversal vulnerability in mapshaper (mbloch/mapshaper) prior to version 0.6.44. The root cause is unsanitized/unsafe handling of the request URL path, enabling an attacker to read arbitrary files on the system with the user’s privileges. Public sources in the connect...

CVE-2023-1163

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option...

CVE-2023-1163

CVE-2023-1163 affects DrayTek Vigor 2960 Web Management Interface; vulnerability in function getSyslogFile of mainfunction.cgi allows path traversal, enabling remote access to restricted files. Affected firmware: 1.5.1.4 and 1.5.1.5. Public exploit/disclosure reported. Risk: unauthorized file acc...

minewebcms 1.15.2 - Cross-site Scripting Vulnerability

Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163 --------------- Steps to...

minewebcms 1.15.2 Cross Site Scripting

Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Date: 02/20/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163...

CVE-2022-1163

Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...

CVE-2022-1163 Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

Cross-site Scripting XSS - Stored in GitHub repository mineweb/minewebcms prior to next...

CVE-2022-1163

MineWebCMS (GitHub repo mineweb/minewebcms) 1.15.2 contains a stored Cross-site Scripting (XSS) vulnerability. The issue is triggered by input fields in the admin interface (e.g., Link Name and URL) that accept data from untrusted sources and later render it in pages, enabling script execution in...

CVE-2021-1163

creationtimestamp| type| source ---|---|--- 2021-01-14 00:54:40+00:00| seen| https://t.me/cibsecurity/22123...