CVE-2026-25101

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 16:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2kakkqnh27 2026-04-02 22:21:44+00:00| seen|...

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2021-25101

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin...

CVE-2025-25101

creationtimestamp| type| source ---|---|--- 2025-02-07 10:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlenkchvs25 2025-02-07 10:48:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113962208280708929 2025-02-07 11:30:46+00:00| seen|...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7...

CVE-2025-25101 WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through = 1.0.7...

CVE-2018-25101 l2c2technologies Koha opac-MARCdetail.pl cross site scripting

A vulnerability, which was classified as problematic, has been found in l2c2technologies Koha up to 20180108. This issue affects some unknown processing of the file /cgi-bin/koha/opac-MARCdetail.pl. The manipulation of the argument biblionumber with the input 2" leads to cross site scripting. The...

CVE-2024-25101

creationtimestamp| type| source ---|---|--- 2024-03-13 17:37:21+00:00| seen| https://t.me/ctinow/206951...

CVE-2024-25101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6...

CVE-2024-25101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6...

CVE-2024-25101

CVE-2024-25101 affects the WordPress plugin Maspik – Spam Blacklist. Public details confirm an "Improper Neutralization of Input During Web Page Generation" leading to a stored XSS vulnerability in Maspik – Spam Blacklist versions

WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)

Software Maspik – Spam blacklist Type Plugin Vulnerable versions = 0.10.6 Fixed in 0.10.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25101 Patch priority Low CVSS severity Low 5.9 Developer Yonifre PSID 8543ae1db053 Credits Dhabaleshwar Das Required privilege...

CVE-2023-25101

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25101

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25101

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25101 due to buffer overflow in the vtysh_ubus set_dmvpn path (gre_key) caused by unsafe sprintf usage. A high-privilege attacker can trigger via specially crafted HTTP requests to the /vtysh_ubus interface, potentially leading to arbitrary code...

CVE-2019-25101

creationtimestamp| type| source ---|---|--- 2023-02-04 12:21:23+00:00| seen| https://t.me/cibsecurity/57520...

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

CVE-2019-25101

OnShift TurboGears 1.0.11.10 is affected by a critical issue in the HTTP Header Handler (tur bogears/controllers.py) that enables HTTP response splitting. The vulnerability is exploitable remotely and is addressed by upgrading to version 1.0.11.11. The patch is identified as f68bbaba47f4474e1da55...

CVE-2022-25101

creationtimestamp| type| source ---|---|--- 2022-02-24 18:21:29+00:00| seen| https://t.me/cibsecurity/38020...

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...