31 matches found
CVE-2020-23064
creationtimestamp| type| source ---|---|--- 2023-06-26 22:11:14+00:00| seen| https://t.me/cibsecurity/65528 2023-11-25 00:45:50+00:00| seen| Telegram/8ZL5qt-1oGojxv22dU4510g677lxSwyLpoTxQkV3Y42k0 2024-05-13 09:59:52+00:00| seen| https://t.me/RipperSec/1940 2024-05-13 10:01:56+00:00| seen|...
CVE-2020-23064
JQuery vulnerability (CVE-2020-11023) : In jQuery versions >=1.0.3 and <3.5.0, passing HTML that contains elements from untrusted sources to DOM manipulation methods (e.g., .html(), .append()) can execute untrusted code. This was fixed in jQuery 3.5.0. Impact: potential untrusted code exec...
CVE-2023-23064
creationtimestamp| type| source ---|---|--- 2023-02-18 00:13:31+00:00| seen| https://t.me/cibsecurity/58480...
CVE-2023-23064
TOTOLINK A720R V4.1.5cu.532 B20210610 is vulnerable to Incorrect Access Control...
CVE-2023-23064
Affected product: TOTOLINK A720R, version V4.1.5cu.532_ B20210610. Vulnerability type / root cause: Incorrect Access Control (improper access control). Impact (as per sources): high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 9.8, network attack vector, no user int...
CVE-2021-23064
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2021-23064
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2022-23064
creationtimestamp| type| source ---|---|--- 2022-05-02 16:27:48+00:00| seen| https://t.me/cibsecurity/41714 2022-05-06 16:38:12+00:00| seen| https://t.me/itsecnews/625...
CVE-2022-23064
Snipe-IT (versions v3.0-alpha to v5.3.7) is affected by a Host Header Injection vulnerability. A specially crafted Host header in the reset password request can cause password reset links to be sent to an attacker-controlled server, enabling leakage of password reset tokens and potentially result...