RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link: https://gitlab.com/francoisjacquet/rosariosis Version: 6.7.2 Tested on: Windows CVE : CVE-2020-15716 Proof Of Concep...

PDF viewer Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing software products such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to reading data beyond the buffer memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Advisory ROSA-SA-2025-3106

Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...

Exploit for OS Command Injection in Xstream

CVE-2020-26217 XStream RCE Exploit XStream remote code execut...

CVE-2020-11732

creationtimestamp| type| source ---|---|--- 2025-11-29 19:01:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-11732.yaml 2025-12-01 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4l4f62f...

CVE-2020-36873

creationtimestamp| type| source ---|---|--- 2025-11-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebcf7n2e...

CVE-2020-36871

creationtimestamp| type| source ---|---|--- 2025-11-26 23:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kzru3vq62u 2025-11-27 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbeb4paa2j...

CVE-2020-36874

creationtimestamp| type| source ---|---|--- 2025-11-26 23:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyrkhdcd2j 2025-11-27 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebfmsh2f...

CVE-2020-36872

creationtimestamp| type| source ---|---|--- 2025-11-26 23:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyllg5at2q 2025-11-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbeb7jyj2b...

K000157985: LibTIFF vulnerabilities CVE-2020-35522, CVE-2020-35521, CVE-2020-35524, and CVE-2020-35523

Security Advisory Description CVE-2020-35522 In LibTIFF, there is a memory malloc failure in tifpixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack. CVE-2020-35521 A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a...

CLSA-2025-1764151714 Fix CVE(s): CVE-2020-10704

SECURITY UPDATE: stack memory exhaustion vulnerability - debian/patches/CVE-2020-10704.patch: fix vulnerability where a deeply nested filter in an unauthenticated LDAP search can exhaust the LDAP server's attack memory causing a SIGSEGV - CVE-2020-10704...

TencentOS Server 3: kernel (TSSA-2024:1025)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1025 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2020-0570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via loc...

TencentOS Server 3: python38 and python38-devel (TSSA-2023:0112)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0112 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: python39 and python39-devel (TSSA-2023:0114)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0114 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: kernel (TSSA-2023:0340)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0340 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages has vulnerable crypto.js package (CVE-2020-36732)

Summary IBM WebSphere Application Server Liberty is shipped as a supporting program of IBM OpenPages. Information about crypto.js package vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. These products have addressed the applicable CVE. F...

Mozilla Firefox < 68.10.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 68.10.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-27 advisory. - A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote...

Mozilla Thunderbird < 78.3

The version of Thunderbird installed on the remote Windows host is prior to 78.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-44 advisory. - When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a...

Mozilla Thunderbird < 78.4.2

The version of Thunderbird installed on the remote Windows host is prior to 78.4.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-49 advisory. - In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable...