CVE-2020-15718

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umsygjp2b...

CVE-2020-15716

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umsvm6t2b...

CLSA-2025-1764858279 jackson-databind: Fix of 2 CVEs

Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected - Rebuilt with the CVE-2025-52999: fixed jackson-core version...

Exploit for Prototype Pollution in Datatables Datatables.Net

CVE-2020-28458 Affected versions of this package are vulnerabl...

Prototype Pollution loadash.pick Dependency Vulnerability in Jira Software Data Center and Server

This High severity Prototype Pollution vulnerability known as CVE-2020-8203 was introduced in 10.3.0 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H allows an unauthenticated attacker to take...

Intel® Smart Sound Technology Advisory

Summary: A potential security vulnerability in Intel® Smart Sound Technology may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0583 Description: Improper access control in the subsystem for Intel...

CVE-2020-36788

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

Security Bulletin: WebSphere Application Server Liberty is could provide weaker than expected security due to crypto.js

Summary WebSphere Application Server Liberty is could provide weaker than expected security due to crypto.jsCVE-2020-36732 Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an...

RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link: https://gitlab.com/francoisjacquet/rosariosis Version: 6.7.2 Tested on: Windows CVE : CVE-2020-15716 Proof Of Concep...

📄 PluckCMS 4.7.10 Arbitrary File Upload

PluckCMS version 4.7.10 suffers from an arbitrary file upload vulnerability. Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck/ Software Link: https://github.com/pluck-cms/pluck/ Version: 4.7.1...

📄 RosarioSIS 6.7.2 Cross Site Scripting

RosarioSIS version 6.7.2 suffers from multiple cross site scripting vulnerabilities. Exploit Title: RosarioSIS 6.7.2 - Cross-Site Scripting XSS Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://gitlab.com/francoisjacquet/rosariosis Software Link:...

Advisory ROSA-SA-2025-3106

Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...

Exploit for OS Command Injection in Xstream

CVE-2020-26217 XStream RCE Exploit XStream remote code execut...

CVE-2020-11732

creationtimestamp| type| source ---|---|--- 2025-11-29 19:01:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-11732.yaml 2025-12-01 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4l4f62f...

CVE-2020-36873

creationtimestamp| type| source ---|---|--- 2025-11-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebcf7n2e...

CVE-2020-36871

creationtimestamp| type| source ---|---|--- 2025-11-26 23:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kzru3vq62u 2025-11-27 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbeb4paa2j...

CVE-2020-36874

creationtimestamp| type| source ---|---|--- 2025-11-26 23:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyrkhdcd2j 2025-11-27 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebfmsh2f...

CVE-2020-36872

creationtimestamp| type| source ---|---|--- 2025-11-26 23:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyllg5at2q 2025-11-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbeb7jyj2b...

K000157985: LibTIFF vulnerabilities CVE-2020-35522, CVE-2020-35521, CVE-2020-35524, and CVE-2020-35523

Security Advisory Description CVE-2020-35522 In LibTIFF, there is a memory malloc failure in tifpixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack. CVE-2020-35521 A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a...

CLSA-2025-1764151714 Fix CVE(s): CVE-2020-10704

SECURITY UPDATE: stack memory exhaustion vulnerability - debian/patches/CVE-2020-10704.patch: fix vulnerability where a deeply nested filter in an unauthenticated LDAP search can exhaust the LDAP server's attack memory causing a SIGSEGV - CVE-2020-10704...