16 matches found
EUVD-2021-23985
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-23985
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could hav...
CVE-2021-23985
If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...
CVE-2025-23985
CVE-2025-23985 refers to a CSRF vulnerability in the WordPress plugin Dynamic URL SEO (versions <= 1.0). The CVE description notes cross-site request forgery, with the issue affecting Dynamic URL SEO from n/a through 1.0. NVD metrics show a CVSS v3.1 base score of 5.4 (Medium) with network acc...
CVE-2025-23985 WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Cross Site Request Forgery.This issue affects Dynamic URL SEO: from n/a through = 1.0...
CVE-2023-23985 WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing
Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: from n/a through 6.3.9.4...
CVE-2024-23985
EzServer 6.4.017 allows a denial of service daemon crash via a long string, such as one for the RNTO command...
WordPress Quiz Maker Plugin <= 6.3.9.4 is vulnerable to Content Spoofing
Software Quiz Maker Type Plugin Vulnerable versions = 6.3.9.4 Fixed in 6.3.9.5 OWASP Top 10 A1: Injection Classification Content Spoofing CVE CVE-2023-23985 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 06c670b37093 Credits yuyudhn Required privilege Unauthenticated...
CVE-2022-23985
creationtimestamp| type| source ---|---|--- 2022-02-25 22:21:18+00:00| seen| https://t.me/cibsecurity/38129...
CVE-2022-23985
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-23985
The CVE-2022-23985 entry corresponds to a vulnerability in Fatek Automation FvDesigner involving FPJ file parsing. Concretely, it is an out-of-bounds write in the FPJ parser that can allow arbitrary code execution when a crafted project file is processed. Multiple sources (ZDI advisories for ZDI-...
CVE-2021-23985
If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...
CVE-2021-23985
CVE-2021-23985 affects Mozilla Firefox prior to version 87. The issue involves the ability to alter certain about:config values (e.g., via malware on the user’s machine) that could enable Devtools remote debugging in a way that is unobtrusive to the user, allowing a remote attacker with direct ne...
Mozilla Firefox < 87.0
"The version of Firefox installed on the remote macOS or Mac OS X host is prior to 87.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-10 advisory. - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 86. Some ...
CVE-2024-23985
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ezserverhttp.rb 2024-01-25 06:26:17+00:00| seen| https://t.me/ctinow/173278 2024-01-26 23:40:07+00:00| seen|...