CVE-2025-15179

creationtimestamp| type| source ---|---|--- 2025-12-29 09:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4k2sk7r22y 2025-12-29 18:08:29+00:00| seen| https://bsky.app/profile/potato.software/post/3mb5gkpdinm2x...

CVE-2025-15179 Tenda WH450 qossetting stack-based overflow

A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2020-15179

The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15179)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

CVE-2017-15179

creationtimestamp| type| source ---|---|--- 2020-11-06 02:56:11+00:00| seen| https://t.me/cibsecurity/15928...

CVE-2017-15179

This CVE entry is rejected/not used; the candidate was withdrawn by its CNA.

CVE-2017-15179

...

CVE-2020-15179

The CVE-2020-15179 issue affects the ScratchSig extension for MediaWiki prior to 1.0.1. It enables stored Cross-Site Scripting through a script tag inside a tag, allowing attackers with edit permission to run scripts in visitors’ browsers, potentially leading to privilege escalation or account t...

CVE-2020-15179 HTML Injection in ScratchSig

The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using tag inside tag, attackers with edit permission can execute scripts on visitors' browser. With MediaWiki JavaScript API, this can potentially lead to privilege escalation and/or account takeover...