13 matches found
CVE-2026-13541
creationtimestamp| type| source ---|---|--- 2026-06-29 08:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzs6miwm2o 2026-06-29 11:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgejefew62n 2026-06-29 20:00:10+00:00| seen|...
CVE-2019-13541
In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code...
CVE-2024-13541
The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqsdeletelisting function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with...
CVE-2024-13541
The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqsdeletelisting function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with...
CVE-2024-13541
creationtimestamp| type| source ---|---|--- 2025-02-12 03:23:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113988772730198797 2025-02-12 04:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcuyzelv2i 2025-02-12 05:06:53+00:00| seen|...
CVE-2024-13541 aDirectory – WordPress Directory Listing Plugin <= 2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the adqsdeletelisting function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with...
CVE-2020-13541
creationtimestamp| type| source ---|---|--- 2021-01-05 19:25:17+00:00| seen| https://t.me/cibsecurity/21572...
CVE-2020-13541
CVE-2020-13541 describes a local privilege escalation in Mobile-911 Server V2.5 caused by overly permissive file-system permissions in the install directory. The documentation indicates that an attacker can overwrite the service executable (e.g., Mobile911.Server.exe) or replace other files and D...
CVE-2019-13541
CVE-2019-13541 affects Horner Automation Cscape 9.90 and earlier, due to an improper input validation issue in processing files (notably CSP file parsing), enabling potential arbitrary code execution. Connected advisories cite memory corruption risks and local/contextual exploitation paths, with ...
Horner Automation Cscape
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low skill level to exploit Vendor: Horner Automation Equipment: Cscape Vulnerabilities: Improper Input Validation, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being accessed, which may...
CVE-2018-13541
The CVE-2018-13541 issue targets CryptoLeu’s Ethereum token smart contract. A concrete integer overflow in the mintToken function allows the contract owner to set an arbitrary user’s balance to any value, indicating a control over token balances beyond intended logic. Affected component: the mint...