14 matches found
CVE-2025-13536
The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...
CVE-2025-13536
creationtimestamp| type| source ---|---|--- 2025-11-27 11:50:03+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m6mcikegbu22 2025-11-27 22:04:02+00:00| seen| https://gist.github.com/Darkcrai86/dc3c9dbc8abb3440b4fd4054f281d069...
CVE-2024-13536
The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...
CVE-2024-13536
creationtimestamp| type| source ---|---|--- 2025-01-21 04:26:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113864448812079089 2025-01-21 05:01:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2376 2025-01-21 05:15:26+00:00| seen|...
CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...
CVE-2024-13536
CVE-2024-13536 affects the WordPress plugin “1003 Mortgage Application” (versions up to 1.87). The vulnerability is a Full Path Disclosure caused by the publicly accessible /inc/class/fnm/export.php when error logging is enabled, enabling unauthenticated attackers to retrieve the webapp’s full pa...
CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...
CVE-2020-13536
creationtimestamp| type| source ---|---|--- 2020-11-06 00:49:40+00:00| seen| https://t.me/cibsecurity/15905...
CVE-2020-13536
An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority...
CVE-2020-13536
Moxa MXView Series 3.1.8 contains a local privilege escalation (CVE-2020-13536) via file-permission misconfigurations that allow an attacker with local access to modify files executed by MXViewService. Talos documents exploitation paths through the execution chain: services.exe -> MXViewServic...
CVE-2019-13536
Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code...
CVE-2019-13536
Delta Electronics TPEditor (Windows) prior to or equal to version 1.94 contains a heap-based buffer overflow in the parsing/processing of TPE files (specifically crafted project files). The vulnerability can allow remote code execution, with exploitation described as requiring user interaction in...
CVE-2018-13536
The CVE-2018-13536 entry concerns ERC20_ICO: mintToken in the smart contract exhibits an integer overflow. This weakness allows the contract owner to arbitrarily set any user’s balance. Affected component: mintToken in the ERC20_ICO contract. Root cause: integer overflow in the balance assignment...
Fedora Update for kernel FEDORA-2013-13536
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-13536 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...