31 matches found
CVE-2025-22653 WordPress Music Press Pro plugin <=1.4.6 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in templaza Music Press Pro allows Stored XSS. This issue affects Music Press Pro: from n/a through 1.4.6...
CVE-2023-22653
An OS command injection vulnerability exists in the vtyshubus tcpdumpstartcb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability...
CVE-2023-22653
CVE-2023-22653 : Milesight UR32L v32.3.0.5 exposes an OS command injection in the vtysh_ubus tcpdump_start_cb API. Cisco Talos details show an authenticated, pre-auth vulnerability where a specially crafted HTTP request can trigger command execution via the tcpdump_start functionality, potentiall...
Milesight UR32L vtysh_ubus tcpdump_start_cb OS command injection vulnerability
Talos Vulnerability Report TALOS-2023-1714 Milesight UR32L vtyshubus tcpdumpstartcb OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-22653 SUMMARY An OS command injection vulnerability exists in the vtyshubus tcpdumpstartcb functionality of Milesight UR32L v32.3.0.5. A speciall...
CVE-2020-22653
creationtimestamp| type| source ---|---|--- 2023-01-20 22:28:55+00:00| seen| https://t.me/cibsecurity/56789...
CVE-2020-22653
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...
CVE-2020-22653
CVE-2020-22653 affects multiple Ruckus products including R310/R500/R600/T300/T301n/T301s (firmware 10.5.1.0.199) and SCG200/SZ-100/SZ-300/vSZ, ZoneDirector 1100/1200/3000/5000 across various older builds. The issue allows attackers to misuse an official system image signature to inject an unauth...
CVE-2022-22653
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices...
CVE-2022-22653
CVE-2022-22653 corresponds to a logic issue in iOS/iPadOS that could allow a malicious website to access information about the user and their devices. The NVD/NIST entry notes the fix in iOS 15.4 and iPadOS 15.4, with CVSS v3.1 base score 7.5 (Network, High impact on confidentiality; no impact on...
CVE-2021-22653
creationtimestamp| type| source ---|---|--- 2021-01-27 22:37:38+00:00| seen| https://t.me/cibsecurity/22752...
CVE-2021-22653
CVE-2021-22653 describes multiple out-of-bounds write vulnerabilities in Fuji Electric Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0) triggered by processing project files. Root cause: out-of-bounds write in the handling of project files could permit arbitrary code executi...