CVE-2024-25089

Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes...

CVE-2022-25089

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEYLOCALMACHINE via UITasks.PersistentRegistryData...

CVE-2020-25089

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2025-25089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator appten-image-rotator allows Reflected XSS.This issue affects Image Rotator: from n/a through = 2.0...

CVE-2025-25089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator appten-image-rotator allows Reflected XSS.This issue affects Image Rotator: from n/a through = 2.0...

CVE-2025-25089 WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appten Image Rotator allows Reflected XSS. This issue affects Image Rotator: from n/a through 2.0...

CVE-2025-25089

CVE-2025-25089 describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Image Rotator (affected: Image Rotator &lt;= 2.0). The issue stems from improper neutralization of input during web page generation , per description. The CVSS data (v3.1) assigns a base score of 7.1 (...

CVE-2024-25089

creationtimestamp| type| source ---|---|--- 2024-02-04 23:31:50+00:00| seen| https://t.me/ctinow/178940 2024-02-29 07:21:50+00:00| seen| https://t.me/ctinow/196264...

CVE-2024-25089

CVE-2024-25089 affects Malwarebytes Binisoft Windows Firewall Control, prior to version 6.9.9.2. The vulnerability enables remote code execution via gRPC named pipes, with a CVSS v3.1 score of 9.8 (CRITICAL). Affected component is the Windows Firewall Control software and its gRPC named-pipe inte...

CVE-2018-25089

creationtimestamp| type| source ---|---|--- 2023-08-28 16:16:39+00:00| seen| https://t.me/cibsecurity/69280...

CVE-2018-25089

CVE-2018-25089 affects glb Meetup Tag Extension for MediaWiki (version 0.1). Root cause involves the Link Attribute Handler allowing manipulation leading to a web link being opened in a context with window.opener access (classic reverse tabnabbing risk). Upgrading to version 0.2 mitigates the iss...

CVE-2023-25089

creationtimestamp| type| source ---|---|--- 2023-07-06 18:20:25+00:00| seen| https://t.me/cibsecurity/66084...

CVE-2023-25089

Summary: CVE-2023-25089 affects Milesight UR32L v32.3.0.5. A buffer overflow in the vtysh_ubus binary’s handle_interface_acl function (with interface and in_acl conditions, notably in_acl = -1) can be triggered by a crafted HTTP request, allowing arbitrary code execution with high privileges over...

CVE-2019-25089

creationtimestamp| type| source ---|---|--- 2022-12-27 14:25:20+00:00| seen| https://t.me/cibsecurity/55393...

CVE-2019-25089 Morgawr Muon handler.clj random values

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089

CVE-2019-25089 affects Morgawr Muon 0.1.1. The vulnerability lies in an unknown functionality within src/muon/handler.clj that leads to insufficiently random values. Exploitation is described as remote. Remediation is available by upgrading to version 0.2.0-indev; the associated patch is c09ed972...

CVE-2022-25089

creationtimestamp| type| source ---|---|--- 2022-03-04 13:35:22+00:00| published-proof-of-concept| https://t.me/intelexch/10033 2023-01-19 04:51:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1563...

CVE-2022-25089

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEYLOCALMACHINE via UITasks.PersistentRegistryData...

CVE-2022-25089

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEYLOCALMACHINE via UITasks.PersistentRegistryData...