16 matches found
CVE-2023-25158
GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore...
EUVD-2025-25158
Malicious code in bioql PyPI...
CVE-2025-25158
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antonio Sanchez Uncomplicated SEO uncomplicated-seo allows Reflected XSS.This issue affects Uncomplicated SEO: from n/a through = 1.2...
CVE-2025-25158 WordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antonio Sanchez Uncomplicated SEO uncomplicated-seo allows Reflected XSS.This issue affects Uncomplicated SEO: from n/a through = 1.2...
CVE-2025-25158
CVE-2025-25158 is a reflected Cross-Site Scripting vulnerability in WordPress Uncomplicated SEO plugin (versions
CVE-2019-25158
creationtimestamp| type| source ---|---|--- 2024-01-12 08:41:40+00:00| seen| https://t.me/ctinow/167126...
CVE-2019-25158
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
CVE-2019-25158
CVE-2019-25158 affects pedroetb tts-api up to version 2.1.4. The vulnerability is in the onSpeechDone function of app.js, enabling OS command injection. A fix is available in version 2.2.0, with the patch identified as 29d9c25415911ea2f8b6de247cb5c4607d13d434. Upgrading to 2.2.0 is recommended to...
CVE-2023-25158
creationtimestamp| type| source ---|---|--- 2023-02-22 00:47:05+00:00| seen| https://t.me/cibsecurity/58646 2023-06-11 20:22:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4538 2024-07-11 05:37:18+00:00| published-proof-of-concept| https://t.me/LockBitRaasRansomware/43294...
Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25158)
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext. This...
CVE-2020-25158
CVE-2020-25158 is a reflected XSS vulnerability affecting B. Braun SpaceCom, Battery Pack with Wi‑Fi, and Data module compactplus (SpaceCom v L81/U61 and earlier; compactplus A10/A11). The ICS advisory details multiple related issues (XSS and other CVEs) and confirms impact when these components ...
CVE-2022-25158
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...
CVE-2022-25158
The CVE-2022-25158 vulnerability affects Mitsubishi Electric MELSEC iQ-F series FX5U(C) and FX5UJ; iQ-R series (R00/01/02, R04/08/16/32/120(EN), R08/16/32/120SF/PCPU, RJ71 variants, etc.); Q/L series (Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU, Q03/04/06/13/26UDV/UDPVCPU, etc.); L series (L02/06...
Mitsubishi Electric FA Products
1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: FA products Vulnerabilities: Use of Password Hash Instead of Password for Authentication, Use of Weak Hash, Cleartext Storage of Sensitive Information, Authentication Bypass by Capture-replay...
CVE-2021-25158
CVE-2021-25158 affects Aruba Instant IAPs. A remote arbitrary file read vulnerability exists in Aruba Instant versions: 6.5.x (6.5.4.18 and below); 8.3.x (8.3.0.14 and below); 8.5.x (8.5.0.11 and below); 8.6.x (8.6.0.7 and below); 8.7.x (8.7.1.1 and below). Siemens/SCALANCE context in related adv...
VulnCheck KEV: CVE-2023-25158
GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore...