CVE-2015-10009

CVE-2015-10009 affects nterchange up to version 4.1.0. The vulnerability targets the getContent function in app/controllers/code_caller_controller.php, where input for the parameter q can be manipulated (example: %5C%27%29;phpinfo%28%29;/*) to achieve code injection. The exploit has been publicly...

CVE-2015-10007

creationtimestamp| type| source ---|---|--- 2023-01-02 14:30:51+00:00| seen| https://t.me/cibsecurity/55737 2025-04-11 13:51:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11422...

CVE-2015-10008

creationtimestamp| type| source ---|---|--- 2023-01-02 14:30:50+00:00| seen| https://t.me/cibsecurity/55736 2025-04-10 20:49:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11354...

CVE-2015-10008

The CVE-2015-10008 issue concerns 82Flex WEIPDCRM, where SQL injection is triggered in an unspecified component of the product. Root cause is a SQL injection vulnerability that can be exploited remotely, with the vulnerability tracked under VDB-217185. A patch identifier (43bad79392332fa39e31b952...

CVE-2015-10008 82Flex WEIPDCRM sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a...

CVE-2015-10007 82Flex WEIPDCRM cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

CVE-2015-10007

CVE-2015-10007 affects 82Flex WEIPDCRM and is described as a cross-site scripting vulnerability impacting some unknown functionality. The issue is reported to be exploitable remotely. A patch is referenced (hash: 43bad79392332fa39e31b95268e76fbda9fec3a4), but the provided documents do not specify...

CVE-2015-10011: Improper Output Neutralization for Logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is...

CVE-2015-10006

creationtimestamp| type| source ---|---|--- 2023-01-01 20:15:44+00:00| seen| https://t.me/cibsecurity/55726...

CVE-2015-10006

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10006 admont28 Ingnovarq insertarSliderAjax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10006

Admont28 Ingnovarq contains a cross-site scripting vulnerability in app/controller/insertarSliderAjax.php, triggered by manipulating the imagetitle parameter. The issue can be exploited remotely and affects an unknown set of functionality within the application. A patch named 9d18a39944d79dfedacd...

CVE-2015-10006 admont28 Ingnovarq insertarSliderAjax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2015-10004

creationtimestamp| type| source ---|---|--- 2022-12-28 00:12:11+00:00| seen| https://t.me/cibsecurity/55456...

CVE-2015-10004

CVE-2015-10004 corresponds to a timing side-channel vulnerability in the token validation path of the github.com/robbert229/jwt library. The underlying issue is a flawed HMAC comparison that leaks timing information, enabling an attacker to infer the expected HMAC with a high likelihood under a h...

CVE-2015-10004 Timing side-channel in github.com/robbert229/jwt

Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC...

CVE-2015-10005

creationtimestamp| type| source ---|---|--- 2022-12-27 12:21:56+00:00| seen| Telegram/PPwhAgQ5lIgVbxJUg1lJp63G-qUyV0xPd08w9PuaHV7k...

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005 markdown-it html_re.js redos

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

CVE-2015-10005

Affected software: markdown-it (up to 2.x). Vulnerability: REDOS in an unknown function of lib/common/html_re.js causing inefficient regular expression complexity. Root cause / impact: manipulation leads to performance concerns; lack of explicit exploitation details in the provided documents. Evi...