CVE-2025-2297

creationtimestamp| type| source ---|---|--- 2025-07-30 14:31:51+00:00| seen| https://bsky.app/profile/paxioncyber.bsky.social/post/3lv6tkx2p4s2e...

CVE-2025-2297

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2025-2297 Privilege Management for Windows - Elevation of Privilege

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...

CVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function...

CVE-2022-2297

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

CVE-2013-2297

Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069...

CVE-2024-2297 Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2024-2297)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2297

creationtimestamp| type| source ---|---|--- 2023-04-27 07:39:59+00:00| seen| https://t.me/cibsecurity/62962...

CVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function...

WordPress Profile Builder Plugin <= 3.9.0 is vulnerable to Sensitive Data Exposure

Software Profile Builder Type Plugin Vulnerable versions = 3.9.0 Fixed in 3.9.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2297 Patch priority Low CVSS severity Low 9.8 Developer Claim ownership PSID 973328704779 Credits István Márton Required...

CVE-2023-2297 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function...

CVE-2023-2297

CVE-2023-2297 affects the WordPress Profile Builder plugin (versions ≤ 3.9.0). The root cause is insecure password reset handling: the plugin uses the plaintext reset key rather than a hashed value in wppb_front_end_password_recovery, enabling unauthorized password resets. The advisory notes that...

CVE-2022-2297

creationtimestamp| type| source ---|---|--- 2022-07-12 20:25:18+00:00| seen| https://t.me/cibsecurity/46073 2025-05-21 15:50:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinicpmssqlitorce.rb 2025-05-22 21:02:16+00:00| seen|...

CVE-2022-2297

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

CVE-2022-2297

CVE-2022-2297 affects SourceCodester Clinics Patient Management System 2.0. An unrestricted file upload vulnerability exists in the update_user.php?user_id=1 flow where manipulating the profile_picture parameter with input like enables remote code execution. Public PoCs and exploit activity are ...

CVE-2022-2297 SourceCodester Clinics Patient Management System unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

CVE-2022-2297 SourceCodester Clinics Patient Management System unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/updateuser.php?userid=1. The manipulation of the argument profilepicture with the input leads to unrestricted upload. It is possib...

openSUSE: Security Advisory for python-Twisted (SUSE-SU-2022:2297-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...