21 matches found
Exploit for CVE-2025-11926
CVE-2025-11926 Wordpress-Re...
WordPress Related Posts Lite plugin <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Tst23@1 in WordPress Plugin Related Posts Lite versions = 1.12...
Linux Distros Unpatched Vulnerability : CVE-2019-11926
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously...
CVE-2019-11926
Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions betwee...
CVE-2024-11926
creationtimestamp| type| source ---|---|--- 2024-12-18 13:41:54+00:00| seen| https://t.me/cvedetector/13196...
CVE-2024-11926 Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions
The Travel Booking WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'stPartnerCreateServiceRental', 'stdeleteorderitem', 'stpartnerapprovebooking', 'saveorderitem', and 'userDenyEachInfo' functions in all versions up t...
CVE-2024-11926 Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions
The Travel Booking WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'stPartnerCreateServiceRental', 'stdeleteorderitem', 'stpartnerapprovebooking', 'saveorderitem', and 'userDenyEachInfo' functions in all versions up t...
CVE-2020-11926
creationtimestamp| type| source ---|---|--- 2024-11-07 20:17:13+00:00| seen| https://t.me/cvedetector/10124...
CVE-2020-11926
An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information...
CVE-2018-11926
...
CVE-2018-11926
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2021-27242
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
Memory corruption
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
CVE-2021-27242
CVE-2021-27242 affects Parallels Desktop 16.0.1-48919. The issue is a memory corruption flaw in the Toolgate component that can be triggered by processing user-supplied data, enabling local attackers to escalate privileges and execute code with hypervisor context. Public sources (ZDI-21-209) desc...
CVE-2019-11926
creationtimestamp| type| source ---|---|--- 2019-09-09 10:25:21+00:00| seen| https://t.me/thehackernews/456...
Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers
Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file. The vulnerabilities reside in HHVM...
Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers
Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file. The vulnerabilities reside in HHVMHipH...
HHVM Multiple Vulnerabilities (Sep 2019)
HHMV is prone to multiple memory overflow vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:facebook:hhvm"; if...
CVE-2019-11926
Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions betwee...
CVE-2019-11926
Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions betwee...