CVE-2009-10003

creationtimestamp| type| source ---|---|--- 2023-01-29 22:36:29+00:00| seen| https://t.me/cibsecurity/57135...

CVE-2009-10003

Capnsquarepants Wordcraft

CVE-2009-10002

creationtimestamp| type| source ---|---|--- 2023-01-13 20:31:13+00:00| seen| https://t.me/cibsecurity/56492...

CVE-2009-10001

creationtimestamp| type| source ---|---|--- 2023-01-13 20:31:11+00:00| seen| https://t.me/cibsecurity/56490...

CVE-2009-10002

The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...

CVE-2009-10001

CVE-2009-10001 affects jianlinwei cool-php-captcha (versions up to 0.2). The vulnerability is in the example-form.php file where manipulating the captcha argument with input like %3Cscript%3Ealert(1)%3C/script%3E leads to cross-site scripting. It can be triggered remotely, and the exploit has bee...

Security Bulletin: TADDM affected by multiple vulnerabilities due to JRuby and Hyperic HQ

Summary IBM Tivoli Application Dependency Discovery Manager is vulnerable to denial of service due to use of JRuby CVE-2011-4838 and cross site scripting due to use of Hyperic HQ CVE-2009-2907, CVE-2009-2899 Vulnerability Details CVEID:CVE-2009-2907 DESCRIPTION: Hyperic HQ is vulnerable to...

Security Bulletin: Multiple Vulnerabilities discovered in libraries used by TCRtoolkit in ITNM

Summary Multiple vulnerabilities CVE-2009-4521; CVE-2015-0250; CVE-2017-5662; CVE-2018-8013; CVE-2019-17566; CVE-2020-11987; CVE-2009-4269; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2021-41033 found in TCRtoolkit component present in IBM Tivoli Network Manager...

Security Bulletin: This Power System update is being released to address multiple CVEs for vTPM1.2

Summary This update addresses multiple CVEs that impacts any VM configured with a virtual trusted platform module vTPM version 1.2 Vulnerability Details CVEID:CVE-2018-5407 DESCRIPTION: Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive...

IBM Websphere Application Server 7.0 Cross Site Scripting

Exploit Title: IBM Websphere Application Server 7.0 - Persistent Cross-Site Scripting Authenticated Date: 2022-12-02 Author: Milad karimi Software Link: https://www.ibm.com/support/pages/6107-websphere-application-server-v61-fix-pack-7-windows Version: 7.0 Tested on: Windows 10 CVE: 2009-0855 1...

CVE-2009-1143

creationtimestamp| type| source ---|---|--- 2022-11-23 20:14:13+00:00| seen| https://t.me/cibsecurity/53454 2025-04-25 21:08:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13542...

CVE-2009-1142

creationtimestamp| type| source ---|---|--- 2022-11-23 20:14:10+00:00| seen| https://t.me/cibsecurity/53451 2025-04-25 21:08:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13540...

CVE-2009-1142

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

CVE-2009-1143

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs aka hgfsmounter...

CVE-2009-1143

CVE-2009-1143 : Open-vm-tools 2009.03.18-154848 contains a realpath race condition in mount.vmhgfs (hgfsmounter) that allows local users to bypass mounting-share access restrictions via a symlink attack. The context indicates a local-privilege-like risk with high impact to confidentiality, integr...

CVE-2009-1142

CVE-2009-1142 affects open-vm-tools version 2009.03.18-154848. The vulnerability arises when the vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled, allowing a local attacker to perform a symlink attack on files in /tmp to gain privileges. Multiple connected s...

CVE-2009-1142

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

CVE-2009-1890 affecting package httpd for versions less than 2.4.54-1

CVE-2009-1890 affecting package httpd for versions less than 2.4.54-1. This CVE either no longer is or was never applicable...

NewStart CGSL MAIN 6.02 : dbus Multiple Vulnerabilities (NS-SA-2022-0093)

The remote NewStart CGSL host, running version MAIN 6.02, has dbus packages installed that are affected by multiple vulnerabilities: - Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other...

Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)

Summary Apache XML Security for Java is shipped with IBM Tivoli Business Manager 6.2.0 as part of its XML security infrastructure. Information about security vulnerabilities affecting Apache XML Security for Javahas been published in a security bulletin. Vulnerability Details CVEID:CVE-2013-4517...