120 matches found
MINI-637Q-GQM9-2266
Bulletin has no description...
MINI-2266-HQGJ-FVP4
Bulletin has no description...
CGA-2266-XCQQ-QPF4
Bulletin has no description...
EUVD-2026-2266
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...
EUVD-2013-2440
Malware in sbrugna...
CVE-2009-2266
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...
Exploit for CVE-2025-2266
🚨 CVE-2025-2266 — WordPress Plugin Exploit 🔍 Vulnerability...
CVE-2025-2266
creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9538 2025-03-29 08:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lliwlmvy752m 2025-03-29 09:31:14+00:00| seen|...
CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...
CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...
CVE-2025-2266
The CVE-2025-2266 entry concerns the WordPress plugin Checkout Mestres do WP for WooCommerce. Affected versions: 8.6.5–8.7.5. Root cause: a missing capability check in cwmpUpdateOptions() that allows unauthenticated modification of options. Impact: attackers can update arbitrary WordPress options...
CGA-2266-3X5X-7XHM
Bulletin has no description...
CVE-2024-2266
CVE-2024-2266 affects keerti1924 Secret-Coder-PHP-Project 1.0, specifically the Login Page file /login.php. The vulnerability is caused by improper handling of the parameters emailcookie and passwordcookie, enabling remote cross-site scripting (XSS) . Exploitation is possible remotely and the exp...
CVE-2023-2266
creationtimestamp| type| source ---|---|--- 2023-12-21 10:37:50+00:00| seen| https://t.me/ctinow/157582...
CVE-2023-2266
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...
CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...
CVE-2023-2266
The CVE-2023-2266 entry concerns Schweitzer Engineering Laboratories SEL-411L, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The root cause is input handling during web page rendering, allowing an attacker to execute scripts in the contex...
Amazon Linux 2 : vim (ALAS-2023-2266)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2266 advisory. vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Use After Free in GitHub repository vim/vim...
SUSE CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...
ISC BIND DoS Vulnerability (CVE-2013-2266) - Linux
ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...