19 matches found
EUVD-2025-12261
Malicious code in bioql PyPI...
CVE-2019-12261
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...
CVE-2018-12261
An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root...
CVE-2024-12261 SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting
The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
Oracle Linux 9 : olcne (ELSA-2024-12261)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12261 advisory. - Update modules and components built with golang 1.20.12 to address CVE-2023-39326 Tenable has extracted the preceding description block directly from the...
Siemens Improper Restriction of Operations Within the Bounds of a Memory Buffer in Wind River VxWorks (CVE-2019-12261)
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host. This plugin only works with Tenable.ot. Please visit...
Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
Exploit Title: Open-AudIT 3.3.0 - Reflective Cross-Site Scripting Authenticated Date: 2020-04-26 Exploit Author: Kamaljeet Kumar Vendor Homepage: https://opmantek.com/network-discovery-inventory-software/ Software Link: https://www.open-audit.org/downloads.php Version: 3.3.0 CVE : CVE-2020-12261...
Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated) Vulnerability
Exploit for php platform in category web applications Exploit Title: Open-AudIT 3.3.0 - Reflective Cross-Site Scripting Authenticated Exploit Author: Kamaljeet Kumar Vendor Homepage: https://opmantek.com/network-discovery-inventory-software/ Software Link: https://www.open-audit.org/downloads.php...
CVE-2020-12261
Open-AudIT 3.3.0 allows an XSS attack after login...
CVE-2020-12261
Open-AudIT 3.3.0 is affected by a reflected/authenticated cross-site scripting vulnerability (CVE-2020-12261). The issue arises in the web interface after login, where crafted input (e.g., payloads placed in the search path) can execute client-side scripts. Public references include Exploit-DB an...
Open-AudIT 3.3.0 Cross Site Scripting
Exploit Title: Open-AudIT 3.3.0 - Authenticated XSS Attacks Date: 26-04-2020 Exploit Author: Kamaljeet Kumar Vendor Homepage: https://opmantek.com/network-discovery-inventory-software/ Software Link: https://www.open-audit.org/downloads.php Version: 3.3.0 CVE : CVE-2020-12261 POC: Step 1: Login t...
CVE-2019-12261
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...
CVE-2019-12261
CVE-2019-12261 is a Wind River VxWorks IPNet TCP vulnerability (6.7–6.9 and vx7) with a Buffer Overflow in the TCP component caused by TCP Urgent Pointer state confusion during connect() to a remote host. The connected documents identify the affected platform, the issue type, and the root cause, ...
URGENT/11: VxWorks RTOS 11 0 day vulnerabilities affect 20 million device-bug warning-the black bar safety net
Armis Labs security researchers recently in the currently most widely used embedded devices in real timeoperating system real-time operating systems, RTOS)VxWorks found 11 a 0 day vulnerability, theoperating systemis widely used in aerospace, defense, industrial, medical, electronic, network, and...
Xerox WorkCentre Multiple Vulnerabilities (XRX19-016) (URGENT/11)
According to its self-reported version, the remote Xerox WorkCentre is affected by multiple remote code execution and denial-of-service vulnerabilities in the IPnet TCP/IP stack. An unauthenticated, remote, attacker could leverage these vulnerabilities to gain full access to the affected device o...
CVE-2018-12261
The connected CNVD entry for CVE-2018-12261 describes a buffer overflow vulnerability in Momentum Axel 720P 5.1.8, with the impact stated as an attacker being able to gain access to user accounts. The documents do not specify the vulnerable component or exact exploit details, nor provide a remedi...
CVE-2017-12261
The CVE-2017-12261 issue is a vulnerability in the restricted shell of Cisco Identity Services Engine (ISE) that allows an authenticated, local attacker to run arbitrary CLI commands with elevated privileges due to incomplete input validation of CLI inputs. It affects ISE products released in 1.4...
Fedora Update for roundup FEDORA-2010-12261
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SuSE9 Security Update : CUPS (YOU Patch Number 12261)
Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server. CVE-2008-3639, CVE-2008-3640, CVE-2008-3641 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...