120 matches found
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2026-1439)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-1439
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...
CVE-2022-1439
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction...
CVE-2025-1439
creationtimestamp| type| source ---|---|--- 2025-03-26 10:25:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8823 2025-03-26 12:12:40+00:00| seen| https://t.me/cvedetector/21154...
CVE-2025-1439
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
CVE-2025-1439 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
CVE-2025-1439 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
Linux Distros Unpatched Vulnerability : CVE-2013-1439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The faster LJPEG decoder in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service NULL pointer...
Linux Distros Unpatched Vulnerability : CVE-2010-1439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the...
RHEL 5 : dcraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - LibRaw: Index overflow in smaldecodesegment CVE-2015-8366 - Unspecified vulnerability in dcraw 0.8.x...
RHEL 7 : dcraw (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libraw: Stack based buffer overflow in the xtransinterpolate function CVE-2017-14265 - Unspecified...
CVE-2019-1439
creationtimestamp| type| source ---|---|--- 2024-02-13 08:26:46+00:00| seen| https://t.me/ctinow/183649...
CVE-2024-1439
creationtimestamp| type| source ---|---|--- 2024-02-12 12:26:58+00:00| seen| https://t.me/ctinow/183069...
CVE-2024-1439
CVE-2024-1439: In Moodle LMS, an inadequate access-control flaw allows a local student to create arbitrary events for higher-role users and add events to all users’ calendars. OpenVAS references Moodle
VulnCheck KEV: CVE-2022-1439
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction...
MSC-2022-1439
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...
CVE-2023-1439
creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:31+00:00| seen| https://t.me/cibsecurity/60230...
CVE-2023-1439 SourceCodester Medicine Tracker System GET Parameter view_details.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...
CVE-2023-1439
CVE-2023-1439 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is in the medicines/view_details.php GET parameter handling, where improper processing of the GET argument enables SQL injection. It can be exploited remotely, and exploits have been disclosed publicly. Remediatio...
