CVE-2015-10011 OpenDNS OpenResolve endpoints.py neutralization for logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is...

CVE-2015-10010 OpenDNS OpenResolve API endpoints.py get cross site scripting

A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attac...

CVE-2015-10010

CVE-2015-10010 affects OpenDNS OpenResolve API: the get function in resolverapi/endpoints.py enables cross-site scripting. Exploitation is remote; attack complexity is high and exploitation is reportedly difficult. The patch c680170d5583cd9342fe1af43001fe8b2b8004dd fixes this issue; applying the ...

CVE-2015-10009

creationtimestamp| type| source ---|---|--- 2023-01-02 18:30:25+00:00| seen| https://t.me/cibsecurity/55740...

CVE-2015-10009

A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/codecallercontroller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/ leads to code injection. The exploit has...

CVE-2015-10009

CVE-2015-10009 affects nterchange up to version 4.1.0. The vulnerability targets the getContent function in app/controllers/code_caller_controller.php, where input for the parameter q can be manipulated (example: %5C%27%29;phpinfo%28%29;/*) to achieve code injection. The exploit has been publicly...

CVE-2015-10007

creationtimestamp| type| source ---|---|--- 2023-01-02 14:30:51+00:00| seen| https://t.me/cibsecurity/55737 2025-04-11 13:51:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11422...

CVE-2015-10008

creationtimestamp| type| source ---|---|--- 2023-01-02 14:30:50+00:00| seen| https://t.me/cibsecurity/55736 2025-04-10 20:49:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11354...

CVE-2015-10008

The CVE-2015-10008 issue concerns 82Flex WEIPDCRM, where SQL injection is triggered in an unspecified component of the product. Root cause is a SQL injection vulnerability that can be exploited remotely, with the vulnerability tracked under VDB-217185. A patch identifier (43bad79392332fa39e31b952...

CVE-2015-10008 82Flex WEIPDCRM sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a...

CVE-2015-10007 82Flex WEIPDCRM cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2015-10007

CVE-2015-10007 affects 82Flex WEIPDCRM and is described as a cross-site scripting vulnerability impacting some unknown functionality. The issue is reported to be exploitable remotely. A patch is referenced (hash: 43bad79392332fa39e31b95268e76fbda9fec3a4), but the provided documents do not specify...

CVE-2015-10006

creationtimestamp| type| source ---|---|--- 2023-01-01 20:15:44+00:00| seen| https://t.me/cibsecurity/55726...

CVE-2015-10006

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10006 admont28 Ingnovarq insertarSliderAjax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10006

Admont28 Ingnovarq contains a cross-site scripting vulnerability in app/controller/insertarSliderAjax.php, triggered by manipulating the imagetitle parameter. The issue can be exploited remotely and affects an unknown set of functionality within the application. A patch named 9d18a39944d79dfedacd...

CVE-2015-10006 admont28 Ingnovarq insertarSliderAjax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10004

creationtimestamp| type| source ---|---|--- 2022-12-28 00:12:11+00:00| seen| https://t.me/cibsecurity/55456...

CVE-2015-10004

CVE-2015-10004 corresponds to a timing side-channel vulnerability in the token validation path of the github.com/robbert229/jwt library. The underlying issue is a flawed HMAC comparison that leaks timing information, enabling an attacker to infer the expected HMAC with a high likelihood under a h...

CVE-2015-10004 Timing side-channel in github.com/robbert229/jwt

Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC...