65 matches found
CVE-2026-2075
A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...
CVE-2026-2075
A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...
Exploit for Improper Input Validation in Unrealircd
UnrealIRCD 3.2.8.1 Backdoor Exploit A clean, flexible exploit...
CVE-2019-2075
In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115908308...
EUVD-2021-2075
Malware in sbrugna...
CVE-2009-2075
Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors...
CVE-2025-2075
creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10390 2025-04-04 07:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590519821899 2025-04-04 07:48:28+00:00| seen|...
CVE-2025-2075 Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
CVE-2024-2075
creationtimestamp| type| source ---|---|--- 2024-03-01 19:31:32+00:00| seen| https://t.me/ctinow/197930 2024-03-01 19:31:37+00:00| seen| https://t.me/ctinow/197935...
CVE-2024-2075
CVE-2024-2075 affects SourceCodester Daily Habit Tracker 1.0. The vulnerability resides in /endpoint/update-tracker.php where manipulation of the day parameter triggers cross-site scripting. Exploitation is possible remotely, and public disclosures exist. The impact is a potential injection of sc...
CVE-2024-2075 SourceCodester Daily Habit Tracker update-tracker.php cross site scripting
A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/update-tracker.php. The manipulation of the argument day leads to cross site scripting. The attack can be...
CVE-2023-5879
Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 and below on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication...
PT-2024-14837 · Genie Company · Aladdin Connect Mobile Application
Name of the Vulnerable Software and Affected Versions: The Genie Company Aladdin Connect Mobile Application versions 5.65 Build 2075 and below Description: The issue concerns the storage of users' product account authentication data in clear text within the application. This allows an attacker wi...
Oracle Linux 7 : binutils (ELSA-2019-2075)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2075 advisory. 2.27-41.base.0.1 - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc...
Amazon Linux 2 : poppler (ALAS-2023-2075)
The version of poppler installed on the remote host is prior to 0.26.5-43. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2075 advisory. A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service DoS via a...
RHEL 9 : libwebp (RHSA-2023:2075)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2075 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photograph...
CVE-2023-2075 Campcodes Online Traffic Offense Management System view_details.php sql injection
A vulnerability classified as critical has been found in Campcodes Online Traffic Offense Management System 1.0. This affects an unknown part of the file /admin/offenses/viewdetails.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. Th...
CVE-2023-2075
CVE-2023-2075 concerns Campcodes Online Traffic Offense Management System 1.0. The flaw is an SQL injection in the /admin/offenses/view_details.php file caused by unsafely handling the id parameter, enabling remote attacker access and potential database data leakage. Public disclosures exist; no ...
CVE-2023-2075 Campcodes Online Traffic Offense Management System view_details.php sql injection
A vulnerability classified as critical has been found in Campcodes Online Traffic Offense Management System 1.0. This affects an unknown part of the file /admin/offenses/viewdetails.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. Th...