43 matches found
CVE-2022-23935
Introduction CVE-2022-23935 exploit PoC exiftool version 12.37 Installation root@kitploit: git clone https://github.com/0xFTW/CVE-2022-23935 cd CVE-2022-23935 chmod +x CVE-2022-23935.py pip3 install pwntools Usage root@kitploit: ./CVE-2022-23935...
CVE-2022-23935-PoC-Exploit
This repository does not have a README...
CVE-2022-23935
CVE-2022-23935 š Python Exploit for CVE-2022-23935 Staged Reverse Shell Payload Generator for CVE-2022-23935 Example root@kitploit: cve-2022-23935 10.10.16.3 44444 Usage root@kitploit: usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host for Callback po...
CVE-2020-23935
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:04+00:00| seen| https://t.me/hackingAttack/34316 2026-09-02 01:02:31+00:00| seen| https://t.me/hackingAttack/34316 2026-09-07 01:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/34316...
UBUNTU-CVE-2026-23935
A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...
CVE-2026-23935
A use-after-free read vulnerability exists in Zabbix's script item/preprocessing (JavaScript) HttpRequest body logic, allowing a privileged (PR:H) administrator on an adjacent network (AV:A) to read out-of-bounds memory, causing high confidentiality impact (VC:H). CVSS 4.0 base score 6.8 (MEDIUM)...
CVE-2026-23935
creationtimestamp| type| source ---|---|--- 2026-08-18 12:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ylxg2k26...
CVE-2025-23935
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...
CVE-2023-23935
Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the stable branch and versions 3.1.0.beta2 and prior on the beta and tests-passed branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal...
CVE-2021-23935
OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code...
Linux Distros Unpatched Vulnerability : CVE-2022-23935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935 Note that Nessus relies on the...
CVE-2025-23935
creationtimestamp| type| source ---|---|--- 2025-01-16 21:20:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7iv7peo2e 2025-01-16 22:56:21+00:00| seen| https://t.me/cvedetector/15652...
CVE-2025-23935
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...
CVE-2025-23935
CVE-2025-23935 is a Cross-Site Scripting vulnerability in the WordPress plugin package Magic Google Maps. The connected Wordfence entry confirms an authenticated Stored XSS via input during web page generation in Magic Google Maps versions up to and including 1.0.4, caused by improper neutralizat...
CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...
CVE-2025-23935 WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fengler Magic Google Maps magic-google-maps allows Stored XSS.This issue affects Magic Google Maps: from n/a through = 1.0.4...
CVE-2024-23935
Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device...
CVE-2024-23935
Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device...
Discourse < 3.0.2 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...