7943 matches found
Xiaomi Pro 13 安全漏洞
Xiaomi Pro 13 is a smartphone from Chinese company Xiaomi Xiaomi. The Xiaomi Pro 13 suffers from a security vulnerability that originates from a specific flaw in the integral-dialog-page.html file, which allows remote attackers to execute arbitrary code...
Xiaomi Pro 13 安全漏洞
Xiaomi Pro 13 is a smartphone from Chinese company Xiaomi Xiaomi. The Xiaomi Pro 13 suffers from a security vulnerability that originates from a specific flaw in the manual-upgrade.html file, which allows remote attackers to execute arbitrary code...
PT-2024-30927 · Xiaomi · Xiaomi Pro 13
Name of the Vulnerable Software and Affected Versions: Xiaomi Pro 13 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this issue, where the targ...
(Pwn2Own) Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
PT-2024-30917 · Xiaomi · Xiaomi Pro 13
Name of the Vulnerable Software and Affected Versions: Xiaomi Pro 13 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this issue, where the targ...
PT-2024-12095 · Xiaomi · Xiaomigetapps
Name of the Vulnerable Software and Affected Versions: XiaomiGetApps affected versions not specified Description: A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this...
Xiaomi Pro 13 isUrlMatchLevel Permissive List of Allowed Inputs Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks As a contributor, create a post and put the following payload in the "Meta Descriptio...
All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC As a contributor, create a post and put the following payload in the "Meta...
410area.com Cross Site Scripting vulnerability OBB-3917827
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nuvon.com.br Cross Site Scripting vulnerability OBB-3917823
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6678
creationtimestamp| type| source ---|---|--- 2024-04-13 12:28:12+00:00| seen| https://t.me/arpsyndicate/4648 2025-05-22 04:43:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17239...
CVE-2024-2279
creationtimestamp| type| source ---|---|--- 2024-04-13 12:03:56+00:00| seen| https://t.me/arpsyndicate/4643 2025-05-22 04:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17231...
CVE-2024-27990
creationtimestamp| type| source ---|---|--- 2024-04-13 02:37:04+00:00| seen| https://t.me/arpsyndicate/4636...
CVE-2024-27970
creationtimestamp| type| source ---|---|--- 2024-04-13 02:32:06+00:00| seen| https://t.me/arpsyndicate/4635...
CVE-2024-23190
creationtimestamp| type| source ---|---|--- 2024-04-13 02:26:56+00:00| seen| https://t.me/arpsyndicate/4634...
CVE-2024-0337
creationtimestamp| type| source ---|---|--- 2024-04-13 02:22:26+00:00| seen| https://t.me/arpsyndicate/4633 2024-05-14 00:33:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/2476...
CVE-2024-27988
creationtimestamp| type| source ---|---|--- 2024-04-13 02:12:03+00:00| seen| https://t.me/arpsyndicate/4631...