16 matches found
CVE-2026-15621
creationtimestamp| type| source ---|---|--- 2026-07-14 02:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql4dwovse27...
CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...
CVE-2025-15621
creationtimestamp| type| source ---|---|--- 2026-04-16 14:29:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjmmol6ohx2t 2026-04-17 13:00:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116420169665687709...
CVE-2020-15621
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmailautoreply.php. When parsing the email parameter, the...
CVE-2020-15621
CVE-2020-15621 affects CentOS Web Panel (cwp-e17.0.9.8.923). The flaw is in ajax_mail_autoreply.php where the email parameter is used to construct SQL queries without proper validation, allowing remote attackers to disclose sensitive information in the context of root. Multiple sources (ZDI-20-76...
openSUSE Security Update : nextcloud (openSUSE-2020-220)
This update for nextcloud fixes the following issues : Nextcloud was updated to 15.0.14 : - NC-SA-2020-002, CVE-2019-15613: workflow rules to depend their behaviour on the file extension when checking file mimetypes boo1162766 - NC-SA-2019-016, CVE-2019-15623: Exposure of Private Information caus...
OPENSUSE-SU-2020:0229-1 Security update for nextcloud
This update for nextcloud fixes the following issues: Nextcloud was updated to 15.0.14: - NC-SA-2020-002, CVE-2019-15613: workflow rules to depend their behaviour on the file extension when checking file mimetypes boo1162766 - NC-SA-2019-016, CVE-2019-15623: Exposure of Private Information caused...
Security update for nextcloud (moderate)
openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2020:0220-1 Rating: moderate References: 1162766 1162775 1162776 1162781 1162782 1162784 Cross-References: CVE-2019-15613 CVE-2019-15621 CVE-2019-15623 CVE-2019-15624 CVE-2020-8118 CVE-2020-8119 Affected Products...
Nextcloud Server < 14.0.13, < 15.0.9, < 16.0.2 Share Vulnerability (NC-SA-2020-012)
Nextcloud Server is prone to an improper permission preservation vulnerability on reshares. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
CVE-2019-15621
Nextcloud Server 16.0.1 is affected by CVE-2019-15621: an improper permissions preservation enables sharees to reshare with write permissions when sharing the mount point of a received share via a public link. Root cause is a permissions preservation flaw in the sharing flow; exploitation details...
admin.imaginecolumbusprimaryacademy.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-896077 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
CVE-2018-15621
CVE-2018-15621 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-15621
What is affected: TP-Link WVR, WAR and ER devices. Vulnerability: remote authenticated administrators can execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Impact: high (CVSS v3 base score 7.2; confidentiality, integrity, and availability are a...
TP-Link Remote Command Injection
Introduction: ================ The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link. These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua files. If the attacker obtains the account a...