337 matches found
CVE-2026-1234
creationtimestamp| type| source ---|---|--- 2026-03-31 08:56:53+00:00| seen| https://gist.github.com/ANIRUDH-SJ/0018340475a61d52fcf717138330d261 2026-04-22 10:30:14+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3mk3c42ruox2o 2026-05-25 10:26:41+00:00| seen|...
MAL-2026-1753 Malicious code in internal-secret-project-1234 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dc95d958f766e3d4594c0ea651f834cd877966e5c76347c4f0d819eb5e79d7 The package internal-secret-project-1234 was found to contain malicious code...
CVE-2020-1234
creationtimestamp| type| source ---|---|--- 2026-02-15 01:21:11+00:00| seen| https://gist.github.com/judas-priest/71b873a9a3196b8fedbfdd1748e71d04 2026-02-15 01:52:29+00:00| seen| https://gist.github.com/judas-priest/af851a5f3bafe8de1a03115a8cabfcd0...
CVE-2020-37135
AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system...
PT-2026-6818
Name of the Vulnerable Software and Affected Versions AMSS++ version 4.7 Description AMSS++ 4.7 has a flaw that permits unauthorized access to administrative accounts. This is due to the use of hardcoded credentials, specifically the default username 'admin' and password '1234'. Successful...
CVE-2021-47707
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...
EUVD-2021-34732
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...
PT-2025-50237
Name of the Vulnerable Software and Affected Versions COMMAX CVD-Axx DVR version 5.1.4 Description The COMMAX CVD-Axx DVR contains weak default administrative credentials, enabling remote password attacks and disclosure of RTSP streams. An attacker can exploit this by sending a POST request to an...
PT-2025-46317
CVE-2025-12542 - CVE-2022-1234: Apache HTTP Server Unauthenticated Remote Code Execution CVE ID : CVE-2025-12542 Published : Nov. 10, 2025, 11:15 p.m. | 1 hour, 30 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 |...
Exploit for CVE-2023-1234
This repository is an offensive tool for Linux server clusters. It is a PoC exploit for CVE-2023-1234, which is not specified in the provided context. The target product/service or framework is not explicitly stated, but it appears to be a Linux server cluster management tool. The vulnerability...
Exploit for Use After Free in Microsoft
CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run m...
CVE-2024-1234
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...
CVE-2012-1234
SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234...
SUSE CVE-2021-1234
A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due t...
Exclusive Addons for Elementor 2.6.9 - Stored Cross-Site Scripting (XSS)
Exploit Title: Exclusive Addons for Elementor ≤ 2.6.9 - Authenticated Stored Cross-Site Scripting XSS Original Author: Wordfence Security Team Exploit Author: Al Baradi Joy Exploit Date: March 13, 2024 Vendor Homepage: https://exclusiveaddons.com/ Software Link:...
Linux Distros Unpatched Vulnerability : CVE-2016-1234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers t...
CVE-2025-1234
creationtimestamp| type| source ---|---|--- 2025-02-22 13:06:31+00:00| seen| https://gist.github.com/scasella/8223c623abddc256fe3978f2c443599d 2025-03-07 08:47:40+00:00| seen| https://bsky.app/profile/calebpr.bsky.social/post/3ljrmqg3ddd22 2025-03-08 21:20:13+00:00| seen|...
CVE-2022-1234
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...
CVE-2021-1234
creationtimestamp| type| source ---|---|--- 2024-11-18 15:52:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113504757865674846 2025-04-10 03:33:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmgkzglhv22h 2025-09-01 17:58:46+00:00| seen|...
CVE-2021-1234
Affected product/edition: Cisco SD-WAN vManage Software (cluster mode)\nVulnerability summary: In the cluster management interface, there is an absence of authentication for sensitive information, allowing an unauthenticated, remote attacker to view sensitive data by sending a crafted request.\nR...