89 matches found
CVE-2026-1988
creationtimestamp| type| source ---|---|--- 2026-02-14 07:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mesi63vgu72g 2026-02-14 10:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068517992447814 2026-02-14 10:30:35+00:00| seen|...
CVE-2022-1988
Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...
CVE-2002-1988
Resin 2.1.1 allows remote attackers to cause a denial of service memory consumption and hang via a URL with long variables for non-existent resources...
Linux Distros Unpatched Vulnerability : CVE-2013-1988
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors...
openSUSE Security Advisory (SUSE-SU-2024:1988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-1988 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute in blocks in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output...
CentOS 7 : kernel-rt (RHSA-2023:1988)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1988 advisory. - drivers/usb/mon/monbin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user- space client to corrupt the monitor's internal memor...
Spaf on the Morris Worm
Gene Spafford wrote an essay reflecting on the Morris Worm of 1988--thirty-five years ago. His lessons from then are still applicable today...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1988)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-1988
creationtimestamp| type| source ---|---|--- 2023-04-11 22:28:35+00:00| seen| https://t.me/cibsecurity/61906...
CVE-2023-1988
CVE-2023-1988 affects SourceCodester Online Computer and Laptop Store v1.0. The vulnerability is a cross-site scripting (XSS) issue in the /admin/?page=maintenance/brand function where the Brand Name argument is not properly validated/escaped, enabling an attacker to inject arbitrary script. Expl...
Important: golang-github-cpuguy83-md2man
Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...
Amazon Linux 2 : thunderbird (ALAS-2023-1988)
The version of thunderbird installed on the remote host is prior to 102.9.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1988 advisory. The Mozilla Foundation describes this issue as follows: Sometimes, when invalidating JIT code while following an...
SUSE CVE-2012-1988
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full...
Australia Passes Bill to Fine Companies up to $50 Million for Data Breaches
The Australian government has passed a bill that markedly increases the penalty for companies suffering from serious or repeated data breaches. To that end, the maximum fines have been bumped up from the current AU$2.22 million to AU$50 million, 30% of an entity's adjusted turnover in the relevan...
Harsher penalties for data breaches in new Australian privacy bill
High-profile breaches mean high-profile action In the aftermath of another crop of high-profile data breaches, the Australian Government also known as the Commonwealth Government has introduced amendments to Australian privacy law which give the regulator new powers and the ability to impose...
CVE-2022-1988
creationtimestamp| type| source ---|---|--- 2022-06-03 12:26:22+00:00| seen| https://t.me/cibsecurity/43794...
CVE-2022-1988
Summary: CVE-2022-1988 is a Cross-site Scripting (XSS) vulnerability in the open‑source ERP project FacturaScripts (GitHub: neorazorx/facturascripts), affecting versions prior to 2022.09. Root cause: lack of sanitization in input handling for the descripcion parameter in Cuenta.php, enabling inje...
Oracle Linux 8 : kernel (ELSA-2022-1988)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1988 advisory. - netfilter: nftablesoffload: incorrect flow offload action array size Florian Westphal 2056728 CVE-2022-25636 - RDMA/cma: Do not change...
AlmaLinux 8 : kernel (ALSA-2022:1988)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1988 advisory. - In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of...