CVE-2025-13180

CVE-2025-13180 affects Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System (versions up to 20250320). The vulnerability arises from improper handling of the first_name/last_name parameters in the /edit_profile function, enabling basic cross-site scripting. It can be expl...

CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2024-13180

creationtimestamp| type| source ---|---|--- 2025-01-14 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquypfex2f 2025-01-14 17:21:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1532 2025-01-14 19:01:22+00:00| seen| https://t.me/cvedetector/15307...

CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2024-13180

Ivanti Avalanche is affected by a path traversal vulnerability (CVE-2024-13180) in versions prior to 6.4.7. The issue allows a remote unauthenticated attacker to leak sensitive information due to improper filtering of path elements. The problem is tied to incomplete fixes for CVE-2024-47011. Affe...

CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2018-13180

CVE-2018-13180 affects the IMM Coin (IMC) Ethereum token. The mintToken function contains an integer overflow that lets the contract owner set any user’s balance to an arbitrary value, compromising balances and token integrity. The documents do not provide exploitation status or official remediat...

CVE-2017-13180

CVE-2017-13180 affects the Android Media Framework (SoftAVCDec) where a bad header can cause a loop, enabling a use-after-free that leads to an out-of-bounds write. This can result in local privilege elevation with code execution in a privileged process, without user interaction. The vulnerabilit...

openclipart.org XSS vulnerability

Vulnerable URL: https://openclipart.org/search/1/?query=%3C%2Fscript%3E%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1318...