CVE-2025-1892

A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the...

CVE-2020-1892

Insufficient boundary checks when decoding JSON in JSONparser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 inclusive, versions between...

Ubuntu: Security Advisory (USN-7476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-1892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML...

CVE-2025-1892

creationtimestamp| type| source ---|---|--- 2025-03-04 01:30:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6307 2025-03-04 04:07:35+00:00| seen| https://t.me/cvedetector/19441 2025-03-06 02:17:23+00:00| seen| Telegram/k72Q-VhsHJlO-t9ztYROY8LMnoHUlO0gHlebJbPo23VKKPTX...

CVE-2025-1892

A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the...

CVE-2025-1892 shishuocms Directory Deletion Page add.json cross site scripting

A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the...

CVE-2025-1892 shishuocms Directory Deletion Page add.json cross site scripting

A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the...

Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-1892)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHCOS 4 : OpenShift Container Platform 4.15.10 (RHSA-2024:1892)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1892 advisory. - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 Note that Nessus has not tested for this...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

gerapy (>=0.9.5, <=0.9.6), scrapy-kk-plus (>=0.1.1, <=0.1.4) +5 more potentially affected by CVE-2024-1892 via scrapy (1.8.4)

scrapy PYPI version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - gerapy =0.9.5, =0.1.1, =0.1.0, =0.1.0, =1.1.0, =0.1.10, =0.1.12 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

moear-package-mobi (>=1.0.0a1, <=1.1.2.post0), moear-spider-zhihudaily (>=1.0.0a1, <=1.1.1) potentially affected by CVE-2024-1892 via scrapy (1.5.2)

scrapy PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - moear-package-mobi =1.0.0a1, =1.0.0a1, =1.1.1 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

bookscrape (>=0.0.1.dev1, <=0.0.2b7), gerapy (>=0.9.3b1, <=0.9.3) potentially affected by CVE-2024-1892 via scrapy (1.5.0)

scrapy PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - bookscrape =0.0.1.dev1, =0.9.3b1, =0.9.3 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-1892 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2024-1892 Source advisory: OSV:PYSEC-2024-162...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-1892 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-1892 Source advisory: MEND:CVE-2024-1892...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-1892 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-1892 Source advisory: MEND:CVE-2024-1892...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...

CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

A Regular Expression Denial of Service ReDoS vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker...