CVE-2026-25101 Session Fixation in Bludit

Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behavior enables an attacker to fix a session ID for a victim and later hijack the authenticated session. This issue was fixed in version 3.17.2...

CVE-2026-25101

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 16:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2kakkqnh27 2026-04-02 22:21:44+00:00| seen|...

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2021-25101

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin...

CVE-2025-25101

creationtimestamp| type| source ---|---|--- 2025-02-07 10:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenkchvs25 2025-02-07 10:48:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113962208280708929 2025-02-07 11:30:46+00:00| seen|...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through = 1.0.7...

CVE-2018-25101 l2c2technologies Koha opac-MARCdetail.pl cross site scripting

A vulnerability, which was classified as problematic, has been found in l2c2technologies Koha up to 20180108. This issue affects some unknown processing of the file /cgi-bin/koha/opac-MARCdetail.pl. The manipulation of the argument biblionumber with the input 2" leads to cross site scripting. The...

CVE-2024-25101

creationtimestamp| type| source ---|---|--- 2024-03-13 17:37:21+00:00| seen| https://t.me/ctinow/206951...

CVE-2024-25101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6...

CVE-2024-25101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6...

CVE-2024-25101

CVE-2024-25101 affects the WordPress plugin Maspik – Spam Blacklist. Public details confirm an "Improper Neutralization of Input During Web Page Generation" leading to a stored XSS vulnerability in Maspik – Spam Blacklist versions

WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)

Software Maspik – Spam blacklist Type Plugin Vulnerable versions = 0.10.6 Fixed in 0.10.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25101 Patch priority Low CVSS severity Low 5.9 Developer Yonifre PSID 8543ae1db053 Credits Dhabaleshwar Das Required privilege...

CVE-2023-25101

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25101

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25101 due to buffer overflow in the vtysh_ubus set_dmvpn path (gre_key) caused by unsafe sprintf usage. A high-privilege attacker can trigger via specially crafted HTTP requests to the /vtysh_ubus interface, potentially leading to arbitrary code...

CVE-2023-25101

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2019-25101

creationtimestamp| type| source ---|---|--- 2023-02-04 12:21:23+00:00| seen| https://t.me/cibsecurity/57520...

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

CVE-2019-25101

OnShift TurboGears 1.0.11.10 is affected by a critical issue in the HTTP Header Handler (tur bogears/controllers.py) that enables HTTP response splitting. The vulnerability is exploitable remotely and is addressed by upgrading to version 1.0.11.11. The patch is identified as f68bbaba47f4474e1da55...

CVE-2022-25101

creationtimestamp| type| source ---|---|--- 2022-02-24 18:21:29+00:00| seen| https://t.me/cibsecurity/38020...