113 matches found
CVE-2011-1561
The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldapauth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password...
CVE-2025-1561
The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-1561
creationtimestamp| type| source ---|---|--- 2025-03-13 04:42:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7396 2025-03-13 06:30:35+00:00| published-proof-of-concept| Telegram/cirjMav2qthUHQuL9ZERJzwyhlHYOBL7ICnhX4m3pJXfR8 2025-03-13 07:15:15+00:00| seen|...
CVE-2025-1561 AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting
The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-1561
An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...
CVE-2024-20084
In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561...
CVE-2024-1561
creationtimestamp| type| source ---|---|--- 2024-05-11 13:48:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7277 2024-05-14 03:25:11+00:00| published-proof-of-concept| Telegram/v-Ke2icr51-PqqUlXFecYLVSiGZOdun89f-7jmTrgElcRI7m 2025-04-22 02:52:22+00:00| published-proof-of-concept...
SUSE CVE-2024-34511
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1561. Reason: This candidate is a duplicate of CVE-2024-1561. Notes: All CVE users should reference CVE-2024-1561 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-1561 Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio
An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...
CVE-2023-1561
creationtimestamp| type| source ---|---|--- 2023-03-22 15:35:51+00:00| seen| https://t.me/cibsecurity/60442...
CVE-2023-1561
The CVE-2023-1561 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. Affected is an unknown function in add_room.php where manipulation leads to unrestricted file uploads. The vulnerability enables remote exploitation, per the provided description, with no explicit remediat...
CVE-2022-1561
The CVE-2022-1561 issue concerns Lura and KrakenD-CE before 2.0.2 and KrakenD-EE before 2.0.0 where URL parameters aren’t sanitized, enabling a crafted URL to alter the backend URL defined for a pipe. The vulnerability does not affect KrakenD itself, but the consumed backend may be vulnerable. Re...
CVE-2022-1561 Crafted backend URLs in Lura Project
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, bu...
CVE-2022-1561
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, bu...
Mageia: Security Advisory (MGASA-2014-0419)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1561)
The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.312.b07-0.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1561 advisory. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...
Mozilla Firefox Security Advisory (MFSA2014-60) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2021-1561
creationtimestamp| type| source ---|---|--- 2021-08-19 00:17:09+00:00| seen| https://t.me/cibsecurity/27571...
CVE-2021-1561 Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability
A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance SMA, could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists...
CVE-2021-1561
Cisco Secure Email and Web Manager (formerly SMA) contains CVE-2021-1561: an authenticated remote attacker can gain unauthorized access to and modify another user’s spam quarantine settings due to improper restriction of the spam-quarantine feature. Exploitation involves sending malicious request...