148 matches found
RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (python-eventlet) (RHSA-2026:1959)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1959 advisory. Eventlet is a networking library written in Python. It achieves high scalability by using non-blocking io while at the same time retaining high...
CVE-2026-1959
Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint...
CVE-2026-1959
Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint...
PT-2026-6904
Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint...
RHSA-2024:1959
creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:19+00:00| seen| Telegram/HOI9RhqBej92SEDYPeYOufaX9SS-ALTRn7qub0MNpF0T4 2025-10-01 09:00:21+00:00| seen| Telegram/T18PCyJX5gS6gcDXW3dVGKsiGFXlCyqv6FilSSHPuh1hqZ4 2025-10-01 09:00:22+00:00| seen|...
CVE-2010-1959
Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors...
CVE-2025-1959
creationtimestamp| type| source ---|---|--- 2025-03-04 23:31:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6463 2025-03-05 01:53:20+00:00| seen| https://t.me/cvedetector/19568 2025-03-05 03:24:23+00:00| seen|...
CVE-2025-1959
CVE-2025-1959 affects Codezips Gym Management System 1.0. The vulnerability exists in an unknown function of /change_s_pwd.php, where manipulation of the login_id/login_key parameters enables SQL injection. Exploitation is remote, and multiple sources confirm public disclosure. No official patch/...
What the US Army’s 1959 ‘Soldier of Tomorrow’ Got Right About the Future of Warfare
Sixty-five years ago, the Army's leaders unveiled its “ultimate weapon” for the age of atomic warfare. Here’s how the service’s vision stands up to today's reality...
RHEL 4 : wireshark (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Wireshark: Dos due to integer overflow in IPTrace capture format parser CVE-2012-0067 - Wireshark 1.2.x...
Oracle Linux 7 : shim (ELSA-2024-1959)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1959 advisory. - Full list of fixed CVEs: CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551 Orabug: 36271343 - Update to...
CVE-2024-1959 Social Sharing Plugin – Social Warfare <= 4.4.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
The Social Sharing Plugin – Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialWarfare' shortcode in all versions up to, and including, 4.4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
CVE-2024-1959 Social Sharing Plugin – Social Warfare <= 4.4.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
The Social Sharing Plugin – Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialWarfare' shortcode in all versions up to, and including, 4.4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
CVE-2024-1959
The Social Warfare WordPress plugin is vulnerable to stored XSS via the socialWarfare shortcode in all versions up to 4.4.6.1 due to insufficient input sanitization/escaping. Exploitation requires contributor-level authentication; no user interaction is needed. The connected documents confirm the...
CentOS 7 : shim (RHSA-2024:1959)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1959 advisory. - A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an err...
RHEL 7 : shim (RHSA-2024:1959)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1959 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...
WordPress Social Warfare Plugin <= 4.4.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Social Warfare Type Plugin Vulnerable versions = 4.4.6.1 Fixed in 4.4.6.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1959 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b4ca6fb05821 Credits Krzysztof Zając...
Oracle Linux 5 : ELSA-2014-1959-1: / kernel (ELSA-2014-19591)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-19591 advisory. - The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket,...
CVE-2023-1959
creationtimestamp| type| source ---|---|--- 2023-04-08 14:28:41+00:00| seen| https://t.me/cibsecurity/61709...
CVE-2023-1959 SourceCodester Online Computer and Laptop Store sql injection
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument category leads to sql injection. The attack can be initiated...