159 matches found
EUVD-2026-1211
An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service...
EUVD-2019-17668
Malware in sbrugna...
EUVD-2017-1211
Malware in sbrugna...
CVE-2020-1211
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'...
CVE-2013-1211
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...
CVE-2009-1211
Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...
CVE-2025-1211
Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...
CVE-2025-1211
creationtimestamp| type| source ---|---|--- 2025-02-11 05:05:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113983508330316842 2025-02-11 05:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpsipft27 2025-02-11 07:18:57+00:00| seen|...
CVE-2025-1211
Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...
CVE-2025-1211
Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...
CVE-2025-1211
CVE-2025-1211 affects hackney releases before 1.21.0. The root cause is improper URL parsing by the URI module and hackey, leading to SSRF when a URL like http://[email protected]/ is parsed so that the host differs between the parsing function and hackney. This can enable an attacker to misro...
CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAut...
Cisco Nexus 1000V Insufficient VSM/VEM Authentication (CVE-2013-1211)
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832. This...
RHEL 9 : lua (RHSA-2023:1211)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1211 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also...
CVE-2023-1211
creationtimestamp| type| source ---|---|--- 2023-03-07 02:13:15+00:00| seen| https://t.me/cibsecurity/59529 2025-03-06 19:38:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6729 2025-12-03 21:02:29+00:00| seen|...
CVE-2023-1211
CVE-2023-1211 describes a SQL injection in phpIPAM (phpipam/phpipam) prior to version 1.5.2. Public references indicate the vulnerability resides in the admin area (for example, /app/admin/custom-fields/edit-result.php) and can be exploited via crafted POST data to perform arbitrary SQL commands ...
CVE-2022-1211
creationtimestamp| type| source ---|---|--- 2022-08-08 02:22:10+00:00| seen| https://t.me/cibsecurity/40435...
tildearrow Furnace Denial of Service Vulnerability
tildearrow Furnace is a multi-system chip tuning tracker compatible with the DefleMask module. tildearrow Furnace has a security vulnerability that stems from an incomplete fix for CVE-2022-1211, which can be exploited by attackers to cause a denial of service vulnerability...
CVE-2022-1289
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch...
CVE-2022-1289
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch...