bladelogic_bmc-cve-2016-1542

bladelogicbmc-cve-2016-1542 针对 CVE-2016-1542 和 CVE-2016-1543 从 insinuator.net https://insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ 重建的利用代码 我最近在一次渗透测试中遇到了易受此 CVE 影响的系统，并找到了来自 insinuator 的利用代码——但出于未知原因（Python requests 功能在较新版本中的变化？），该利用代码无法正常工作。 与 RSCD 代理的 XMLRPC 通信通过以下步骤完成...

CVE-2021-1542

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:36+00:00| seen| https://t.me/hackingAttack/13348 2026-09-02 01:03:12+00:00| seen| https://t.me/hackingAttack/13348 2026-09-08 03:00:06+00:00| seen| https://t.me/hackingAttack/13348 2026-09-09 00:00:46+00:00| seen|...

CVE-2026-1542

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

CVE-2026-1542

creationtimestamp| type| source ---|---|--- 2026-02-28 09:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfvwsfcq6o2v 2026-02-28 10:09:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfvyaqnuay2l 2026-02-28 10:09:43+00:00| seen|...

CVE-2026-1542 Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

CVE-2026-1542

The Super Stage WP WordPress plugin (versions

EUVD-2026-1542

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themesuite Automotive Listings automotive allows Blind SQL Injection.This issue affects Automotive Listings: from n/a through = 18.6...

CVE-2025-1542

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0...

CVE-2025-1542

creationtimestamp| type| source ---|---|--- 2025-03-26 11:25:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8832 2025-03-26 12:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llbslsqh3v2g 2025-03-26 13:00:50+00:00| seen|...

CVE-2025-1542

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0...

CVE-2025-1542 Improper permission control in OXARI ServiceDesk

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0...

CVE-2025-1542

CVE-2025-1542 describes an improper permission control vulnerability in the OXARI ServiceDesk application. The issue affects versions prior to 2.0.324.0, where an attacker using a guest or unprivileged account could gain additional administrative permissions in the application. The NVD metrics in...

CVE-2025-1542 Improper permission control in OXARI ServiceDesk

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0...

Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure

Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver. 4.00...

Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference Vulnerability

Elber Wayber Analog/Digital Audio STL version 4.00 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected...

CVE-2023-1542

CVE-2023-1542 concerns business logic errors in the open-source project answerdev/answer prior to version 1.0.6 . Connected sources confirm the affected component and version range and provide a remediation: upgrade to 1.0.6 or later . The issue is described consistently across Red Hat/OSV and ot...

CVE-2023-1542 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1542 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2022-1542

creationtimestamp| type| source ---|---|--- 2022-05-30 12:17:56+00:00| seen| https://t.me/cibsecurity/43537...

CVE-2022-1542

The HPB Dashboard WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...