13 matches found
CVE-2026-13071
creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
WordPress Custom Admin Menu plugin <= 1.0.0 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Yousof Nahya in WordPress Plugin Custom Admin Menu versions = 1.0.0...
CVE-2025-13071
creationtimestamp| type| source ---|---|--- 2025-12-09 08:01:41+00:00| seen| https://gist.github.com/Darkcrai86/6218b103e76a646c545b484268694727 2025-12-09 09:26:19+00:00| seen| https://gist.github.com/Darkcrai86/d23c5f5b0f14fcae4068a588b849d8af...
CVE-2025-13071 Custom Admin Menu <= 1.0.0 - Reflected XSS
The Custom Admin Menu WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2019-13071
CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page...
CVE-2020-13071
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
PowerPanel Business Edition 3.4.0 Cross Site Request Forgery Vulnerability
PowerPanel Business Edition version 3.4.0 is vulnerable to cross site request forgery vulnerability. This can be exploited by tricking an authenticated user into visiting a web page controlled by a malicious person. Exploit Title: PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery...
CVE-2019-13071
CVE-2019-13071 affects PowerPanel Business Edition 3.4.0 (Agent/Center component). The vulnerability is a CSRF flaw that allows an attacker to submit POST requests to arbitrary forms within the web application by convincing an authenticated user to visit a malicious page. This can enable actions ...
PowerPanel Business Edition 3.4.0 Cross Site Request Forgery
Exploit Title: PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery Date: 7/9/2019 Exploit Author: Joey Lane Vendor Homepage: https://www.cyberpowersystems.com Version: 3.4.0 Tested on: Ubuntu 16.04 CVE : CVE-2019-13071 Reported to vendor on 5/25/2019, no acknowledgement. The Agent/Cent...
CVE-2018-13071
CVE-2018-13071 affects the CCindex10 (T10) Ethereum token. The issue is a root cause of an integer overflow in the contract’s mintToken function, allowing the contract owner to set any user balance to an arbitrary value. Documents consistently describe this vulnerability as a balance manipulation...
CVE-2018-13071
The mintToken function of a smart contract implementation for CCindex10 T10, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2017-13071
QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 for QTS 4.3.3, 5.2.0 for QTS 4.3.4, and earlier...
CVE-2017-13071
QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 for QTS 4.3.3, 5.2.0 for QTS 4.3.4, and earlier...