17 matches found
CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser
A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...
EUVD-2021-23985
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-23985
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could hav...
CVE-2021-23985
If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...
CVE-2025-23985 WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Cross Site Request Forgery.This issue affects Dynamic URL SEO: from n/a through = 1.0...
CVE-2025-23985
CVE-2025-23985 refers to a CSRF vulnerability in the WordPress plugin Dynamic URL SEO (versions <= 1.0). The CVE description notes cross-site request forgery, with the issue affecting Dynamic URL SEO from n/a through 1.0. NVD metrics show a CVSS v3.1 base score of 5.4 (Medium) with network acc...
CVE-2023-23985 WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing
Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: from n/a through 6.3.9.4...
CVE-2024-23985
EzServer 6.4.017 allows a denial of service daemon crash via a long string, such as one for the RNTO command...
WordPress Quiz Maker Plugin <= 6.3.9.4 is vulnerable to Content Spoofing
Software Quiz Maker Type Plugin Vulnerable versions = 6.3.9.4 Fixed in 6.3.9.5 OWASP Top 10 A1: Injection Classification Content Spoofing CVE CVE-2023-23985 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 06c670b37093 Credits yuyudhn Required privilege Unauthenticated...
CVE-2022-23985
creationtimestamp| type| source ---|---|--- 2022-02-25 22:21:18+00:00| seen| https://t.me/cibsecurity/38129...
CVE-2022-23985
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-23985
The CVE-2022-23985 entry corresponds to a vulnerability in Fatek Automation FvDesigner involving FPJ file parsing. Concretely, it is an out-of-bounds write in the FPJ parser that can allow arbitrary code execution when a crafted project file is processed. Multiple sources (ZDI advisories for ZDI-...
CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2021-23985
If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...
CVE-2021-23985
CVE-2021-23985 affects Mozilla Firefox prior to version 87. The issue involves the ability to alter certain about:config values (e.g., via malware on the user’s machine) that could enable Devtools remote debugging in a way that is unobtrusive to the user, allowing a remote attacker with direct ne...
Mozilla Firefox < 87.0
"The version of Firefox installed on the remote macOS or Mac OS X host is prior to 87.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-10 advisory. - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 86. Some ...
CVE-2024-23985
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ezserverhttp.rb 2024-01-25 06:26:17+00:00| seen| https://t.me/ctinow/173278 2024-01-26 23:40:07+00:00| seen|...