CVE-2022-23935

CVE-2022-23935 🐍 Exploit en Python para CVE-2022-23935 Generador de payloads de shell inversa por etapas para CVE-2022-23935 Ejemplo root@kitploit: cve-2022-23935 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host f...

CVE-2022-23935

Introducción Exploit PoC de CVE-2022-23935 para exiftool versión 12.37 Instalación root@kitploit: git clone https://github.com/0xFTW/CVE-2022-23935 cd CVE-2022-23935 chmod +x CVE-2022-23935.py pip3 install pwntools Uso root@kitploit: ./CVE-2022-23935...

CVE-2022-23935-PoC-Exploit

Questo repository non contiene un README...

UBUNTU-CVE-2026-23935

A Zabbix administrator is able to read out of bounds memory by utilizi...

CVE-2026-23935

A use-after-free read vulnerability exists in Zabbix's script item/preprocessing (JavaScript) HttpRequest body logic, allowing a privileged (PR:H) administrator on an adjacent network (AV:A) to read out-of-bounds memory, causing high confidentiality impact (VC:H). CVSS 4.0 base score 6.8 (MEDIUM)...

CVE-2026-23935

creationtimestamp| type| source ---|---|--- 2026-08-18 12:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ylxg2k26...

CVE-2025-23935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

CVE-2023-23935

Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the stable branch and versions 3.1.0.beta2 and prior on the beta and tests-passed branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal...

CVE-2021-23935

OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code...

Linux Distros Unpatched Vulnerability : CVE-2022-23935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935 Note that Nessus relies on the...

CVE-2025-23935

creationtimestamp| type| source ---|---|--- 2025-01-16 21:20:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7iv7peo2e 2025-01-16 22:56:21+00:00| seen| https://t.me/cvedetector/15652...

CVE-2025-23935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

CVE-2025-23935

CVE-2025-23935 is a Cross-Site Scripting vulnerability in the WordPress plugin package Magic Google Maps. The connected Wordfence entry confirms an authenticated Stored XSS via input during web page generation in Magic Google Maps versions up to and including 1.0.4, caused by improper neutralizat...

CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...

CVE-2024-23935

Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device...

CVE-2024-23935

Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device...

Discourse < 3.0.2 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2023-23935

creationtimestamp| type| source ---|---|--- 2023-03-16 23:31:19+00:00| seen| https://t.me/cibsecurity/60217...

CVE-2023-23935 Presence of restricted personal Discourse messages may be leaked if tagged with a tag

Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the stable branch and versions 3.1.0.beta2 and prior on the beta and tests-passed branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal...