109 matches found
Exploit for CVE-2026-2472
🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of C...
CVE-2026-2472
creationtimestamp| type| source ---|---|--- 2026-02-20 23:10:40+00:00| seen| https://gist.github.com/alon710/45b7af13c07847f287b58f8853e286b0 2026-02-24 06:48:10+00:00| seen| https://t.me/poxek/5938 2026-03-22 09:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/76537...
EUVD-2026-2472
In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CMA area Bug description When I tested kexec with the latest kernel, I ran into the following warning: 40.712410 ------------ cut here ------------ 40.712576 WARNING: CPU: 2 PID:...
RHSA-2020:2472 Red Hat Security Advisory: virt:rhel security update
Bulletin has no description...
CVE-2023-2472
The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is also active and configured, leading to a Reflected Cross-Site Scripting which...
CVE-2012-2472
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service CPU consumption via crafted SIP traffic, aka Bug ID...
CVE-2025-2472
creationtimestamp| type| source ---|---|--- 2025-03-17 23:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7888 2025-03-18 03:31:08+00:00| seen| https://t.me/cvedetector/20554 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21...
CVE-2025-2472 PHPGurukul Apartment Visitors Management System Sign In index.php sql injection
A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attac...
CVE-2025-2472 PHPGurukul Apartment Visitors Management System Sign In index.php sql injection
A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Sign In. The manipulation of the argument username leads to sql injection. The attac...
Linux Distros Unpatched Vulnerability : CVE-2011-2472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. dot dot in the...
CGA-2472-4MP7-7F54
Bulletin has no description...
CVE-2024-2472
The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'startorusesessionforcustomer' function in all versions up to and including 4.9.9. This makes it possible for unauthenticated attackers to view...
WordPress LatePoint Plugin <= 4.9.9 is vulnerable to Broken Access Control
Software LatePoint Type Plugin Vulnerable versions = 4.9.9 Fixed in 4.9.9.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2472 Patch priority Low CVSS severity Low 8.6 Developer Claim ownership PSID c507e34d06b9 Credits Gharib Sharifi - WaveSec Joel Avia...
Amazon Linux 2 : python-pillow (ALAS-2024-2472)
The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2472 advisory. Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote...
Huawei EulerOS: Security Advisory for apr (EulerOS-SA-2023-2472)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2472
creationtimestamp| type| source ---|---|--- 2023-06-05 18:28:35+00:00| seen| https://t.me/cibsecurity/64980...
CVE-2023-2472 Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is also active and configured, leading to a Reflected Cross-Site Scripting which...
CVE-2022-2472
creationtimestamp| type| source ---|---|--- 2022-09-15 18:27:52+00:00| seen| https://t.me/cibsecurity/49828...
CVE-2022-2472 Improper Initialization vulnerability in local server authentication logic
Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428...
CVE-2022-2472
CVE-2022-2472 is an improper initialization vulnerability in the EZVIZ CS-C6N-A0-1C2WFR local server component. It allows a local attacker to read the memory space containing the encrypted admin password. Affected: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. Mitigation: update to...