13 matches found
CVE-2026-12567
creationtimestamp| type| source ---|---|--- 2026-06-18 15:41:36+00:00| seen| https://gist.github.com/alon710/ab95b5b68cf65f68ecfb103546b48b28...
CVE-2026-12567
The githubworkflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location...
CVE-2019-12567
Stack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2018-10387 and CVE-2019-12568...
CVE-2024-12567
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
CVE-2024-12567
creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537173124576 2025-01-13 06:05:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1352 2025-01-13 06:10:26+00:00| seen|...
CVE-2024-12567
CVE-2024-12567 – Icegram Express Email Subscribers (WP plugin) prior to 5.7.45 stores and escapes settings poorly, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disabled. Impact described in sources as admin-level Stored XSS within form settings, multisit...
CVE-2024-12567 Email Subscribers < 5.7.45 - Admin+ Stored XSS
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...
CVE-2019-12567
creationtimestamp| type| source ---|---|--- 2024-03-16 14:21:43+00:00| seen| https://t.me/ctinow/209557...
CVE-2019-12567
The CVE-2019-12567 issue is a stack-based overflow in the logMess function of Open TFTP Server MT 1.65 and earlier, as noted in Red Hat advisories. A remote attacker can trigger this via a long TFTP error packet, leading to denial of service and the possibility of arbitrary code execution. The Re...
CVE-2017-12567
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2...
CVE-2017-12567
Summary (CVE-2017-12567) : Concrete SQL injection vulnerability reported affecting Quest KACE products: Asset Management Appliance 6.4.120822–7.2, Systems Management Appliance 6.4.120822–7.2.101, and K1000 as a Service 7.0–7.2. The issues stem from SQL injection in affected components, enabling r...