37 matches found
CVE-2026-20101
creationtimestamp| type| source ---|---|--- 2026-03-04 18:20:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavkoaann2d 2026-03-04 22:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbcf5gvpw2e 2026-03-05 11:03:43+00:00| seen|...
@tgticketing/common (>=1.0.2 <=1.0.25), pirvp (=1.0.0) potentially affected by unknown CVE via exrpess (=0.0.1-security)
exrpess NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20101...
CVE-2024-20101
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602...
CVE-2023-20101
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for th...
CVE-2021-20101
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...
CVE-2017-20101
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...
CVE-2025-20101
Out-of-bounds read for some IntelR Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access...
CVE-2025-20101
Summary: CVE-2025-20101 is an out-of-bounds read in Intel® Graphics Drivers that could allow an authenticated local user to disclose information or cause a denial of service. Affected software (per sources): Intel® Graphics Drivers for Intel® Arc, Arc Pro, Iris Xe, Data Center GPU Flex Series, an...
CVE-2024-20101
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602...
CVE-2023-37323 D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability
D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability...
Cisco Emergency Responder Static Credentials (cisco-sa-cer-priv-esc-B9t3hqk9)
According to its self-reported version, Cisco Emergency Responder Static Credentials is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems
Cisco has released updates to address a critical security flaw impacting Emergency Responder that allows unauthenticated, remote attackers to sign into susceptible systems using hard-coded credentials. The vulnerability, tracked as CVE-2023-20101 CVSS score: 9.8, is due to the presence of static...
CVE-2023-20101
creationtimestamp| type| source ---|---|--- 2023-10-04 20:12:04+00:00| seen| https://t.me/cibsecurity/71609 2023-10-05 14:27:13+00:00| seen| https://t.me/KomunitiSiber/893 2023-10-05 16:30:07+00:00| seen| https://t.me/truesecator/4932 2023-10-05 16:34:30+00:00| seen|...
CVE-2023-20101
Cisco Emergency Responder is affected by a vulnerability where an unauthenticated attacker can log in via the root account that uses default, static credentials. The issue comes from static root credentials that cannot be changed or deleted, enabling the attacker to log in and execute arbitrary c...
CVE-2017-20101
creationtimestamp| type| source ---|---|--- 2022-06-27 18:34:45+00:00| seen| https://t.me/cibsecurity/45188...
CVE-2017-20101 ProjectSend information disclosure
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...
CVE-2017-20101
CVE-2017-20101 affects ProjectSend r754. A vulnerability in the file/process: process.php?do=zip_download allows manipulation of the argument client/file, leading to information disclosure. The flaw is exploitable remotely. Connected documents confirm the impact as an information disclosure vulne...
CVE-2017-20101 ProjectSend information disclosure
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...
CVE-2022-20101
creationtimestamp| type| source ---|---|--- 2022-05-04 00:34:34+00:00| seen| https://t.me/cibsecurity/41864...
CVE-2022-20101
CVE-2022-20101 describes a path traversal vulnerability in the aee daemon that can cause local information disclosure without requiring user interaction. The underlying issue is a path traversal flaw, enabling disclosure of sensitive data with local access. The exposure is supported by multiple s...