76 matches found
CVE-2026-1631
creationtimestamp| type| source ---|---|--- 2026-05-18 08:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4imms5k22h...
PT-2025-28060 · Undefined · Undefined
CVE-2025-1631 Rejected reason https://t.co/W1rY8Hv2mo Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x...
CVE-2013-1631
Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action...
CVE-2024-1631
Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key. When no seed value is provided, it is expected that the library generates the secret key using...
PT-2024-21636 · Undefined · Undefined
CVE-2024-27084 Rejected reason: This CVE is a duplicate of CVE-2024-1631. https://t.co/234axZtati...
CVE-2024-1631
creationtimestamp| type| source ---|---|--- 2024-02-21 04:21:45+00:00| seen| https://t.me/ctinow/189172 2024-02-21 04:26:13+00:00| seen| https://t.me/ctinow/189180 2024-02-22 03:38:58+00:00| seen| https://t.me/arpsyndicate/3893...
@bundly/ic-core-js (>=0.1.0 <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0 <=0.4.2-rc.4) +10 more potentially affected by CVE-2024-1631 via @dfinity/auth-client (>=0.20.2 <=0.9.3)
@dfinity/auth-client NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3, =0.0.2, =0.0.38-next-2023-12-19, =0.0.1, =0.0.7 Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...
@bundly/ic-core-js (>=0.1.0 <=0.4.2-rc.4), @bundly/ic-react (>=0.1.0 <=0.4.2-rc.4) +29 more potentially affected by CVE-2024-1631 via @dfinity/identity (>=0.20.2 <=0.9.3)
@dfinity/identity NPM version =0.20.2, =0.1.0, =0.1.0, =0.1.1, =0.0.2, =0.8.5, =0.8.0, =0.8.4, =0.1.8, =0.1.11, =1.0.0-alpha.0, =1.7.0, =0.0.1, =0.0.1, =0.0.4, =0.0.5-fix6 and more Source cves: CVE-2024-1631 Source advisory: OSV:GHSA-C9VV-FHGV-CJC3...
CVE-2024-1631
CVE-2024-1631 describes a vulnerability in the editor-js/agent-js identity library where Ed25519KeyIdentity.generate may use an insecure seed instead of secure randomness when no seed is provided. The private key for identity 535yc-uxytb-gfk7h-tny7p-vjkoe-i4krp-3qmcl-uqfgr-cpgej-yqtjq-rqe can be ...
Rocky Linux 8 : python-urllib3 (RLSA-2021:1631)
The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2021:1631 advisory. - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the...
Rocky Linux 8 : GStreamer, libmad, and SDL (RLSA-2020:1631)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1631 advisory. - The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service SIGABRT because of double free ...
Oracle Linux 8 : GStreamer, / libmad, / and / SDL (ELSA-2020-1631)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1631 advisory. - Fixes CVE-2018-7263 - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit functions in video/SDLblit.c Tenable has extracted the preceding...
CVE-2023-1631
CVE-2023-1631 concerns JiangMin Antivirus 16.2.2022.418. Affected component: IOCTL Handler in kvcore.sys, function 0x222010. Root cause described as a null pointer dereference, exploitable via local access. Several connected sources confirm the issue and its local-exploitation nature; no remote v...
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1631)
The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.342.b07-0.68. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1631 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE...
Microweber CMS 1.2.15 Account Takeover
Exploit Title: Microweber CMS 1.2.15 - Account Takeover Date: 2022-05-09 Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631...
Microweber CMS 1.2.15 - Account Takeover Vulnerability
Exploit Title: Microweber CMS 1.2.15 - Account Takeover Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631 Description:...
CVE-2022-1631
creationtimestamp| type| source ---|---|--- 2022-05-09 18:36:24+00:00| seen| https://t.me/cibsecurity/42177...
CVE-2022-1631 Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain...
CVE-2022-1631
The CVE-2022-1631 issue affects microweber/microweber before v1.2.15, described across multiple sources as an OAuth misconfiguration that enables account takeover. The root cause is the lack of email confirmation and insufficient validation of emails from social login providers, allowing an attac...
AlmaLinux 8 : python-urllib3 (ALSA-2021:1631)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:1631 advisory. - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the...