28 matches found
CVE-2026-22506
creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:13+00:00| seen| Telegram/5Bb0qK301Op7Yhojb7YEduqeLGlpAUlFeXZf97xc-7ChehU...
CVE-2026-22506
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through = 1.0...
CVE-2026-22506 WordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through = 1.0...
EUVD-2023-26646
Malicious code in bioql PyPI...
CVE-2023-22506
This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions take...
Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information exposure (CVE-2022-22506)
Summary Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information disclosure CVE-2022-22506 Vulnerability Details CVEID:CVE-2022-22506 DESCRIPTION: IBM Robotic Process Automation contains a vulnerability that could allow user ids may be exposed across tenants. CV...
CVE-2025-22506
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Smart Agenda Smart Agenda smart-agenda-prise-de-rendez-vous-en-ligne allows Stored XSS.This issue affects Smart Agenda: from n/a through = 4.7...
CVE-2025-22506
creationtimestamp| type| source ---|---|--- 2025-01-13 14:13:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1362 2025-01-13 14:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwe5w2372h 2025-01-13 15:42:50+00:00| seen|...
CVE-2025-22506 WordPress Smart Agenda Plugin <= 4.7 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Smart Agenda Smart Agenda smart-agenda-prise-de-rendez-vous-en-ligne allows Stored XSS.This issue affects Smart Agenda: from n/a through = 4.7...
CVE-2025-22506 WordPress Smart Agenda Plugin <= 4.7 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SmartAgenda Smart Agenda allows Stored XSS.This issue affects Smart Agenda: from n/a through 4.7...
CVE-2025-22506
CVE-2025-22506 is a Cross-Site Request Forgery leading to Stored Cross-Site Scripting in the SmartAgenda plugin (Smart Agenda) for online appointment booking, affecting versions up to 4.7. The Wordfence entry confirms the issue and notes it has been patched; no exploit details are provided in the...
CVE-2023-51642
CVE-2023-51642 involves Allegra’s loadFieldMatch deserialization, where untrusted data is deserialized due to improper input validation. This leads to remote code execution in the LOCAL SERVICE context. Attack requires authentication, but Allegra’s registration mechanism can create a user with su...
CVE-2022-22506
CVE-2022-22506 affects IBM Robotic Process Automation (RPA) 21.0.2 (and related deploys). The vulnerability could allow user IDs to be exposed across tenants, impacting confidentiality. The IBM Security Bulletin lists affected products/versions and provides remediation: upgrade to 21.0.2 IF002 or...
CVE-2024-22506
creationtimestamp| type| source ---|---|--- 2024-02-11 13:10:40+00:00| seen| https://t.me/arpsyndicate/3380...
CVE-2023-22506
creationtimestamp| type| source ---|---|--- 2023-07-25 06:59:17+00:00| seen| https://t.me/thehackernews/3641 2023-07-25 11:48:45+00:00| seen| https://t.me/truesecator/4652...
CVE-2023-22506
This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...
CVE-2023-22506
This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...
Remote code execution
This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...
CVE-2023-22506
CVE-2023-22506 affects Atlassian Bamboo Data Center, introduced in 8.0.0. An authenticated attacker can modify a system call and execute arbitrary code (RCE) with high impact to confidentiality, integrity, and availability, without user interaction. Vulnerable: Bamboo Server/Data Center versions ...
Injection, RCE (Remote Code Execution) in Bamboo
This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions take...