CVE-2024-25170-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25170 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host Header. POC is coming soon:...

mezzanine-api (>=0.1.0a1, <=0.7.1) potentially affected by CVE-2024-25170 via mezzanine (6.0.0)

mezzanine PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - mezzanine-api =0.1.0a1, =0.7.1 Source cves: CVE-2024-25170 Source advisory: OSV:PYSEC-2026-1626...

CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2026-25170

Technical details for CVE-2026-25170 are not publicly provided in the supplied documents. Monitor updates from Microsoft and national advisories for affected products, fixes, and confirmed impact.

CVE-2026-25170

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2018-25170

creationtimestamp| type| source ---|---|--- 2026-03-06 14:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfipnviud27...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

CVE-2025-25170

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DotsquaresLtd Migrate Posts migrate-post allows Reflected XSS.This issue affects Migrate Posts: from n/a through = 1.0...

CVE-2025-25170

CVE-2025-25170 affects the WordPress Migrate Posts plugin (versions

django-clubhouse (>=0.0.1, <=0.2.19) potentially affected by CVE-2024-25170 via mezzanine (4.1.0)

mezzanine PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - django-clubhouse =0.0.1, =0.2.19 Source cves: CVE-2024-25170 Source advisory: OSV:GHSA-22CC-W7XM-RFHX...

CVE-2024-25170

creationtimestamp| type| source ---|---|--- 2024-02-28 21:26:58+00:00| seen| https://t.me/ctinow/195880 2024-02-28 21:27:08+00:00| seen| https://t.me/ctinow/195890...

CVE-2024-25170

The Mezzanine CMS version v6.0.0 is affected by a Design/Logic Flaw that allows attackers to bypass access controls by manipulating the Host header . This vulnerability can lead to unauthorized access to sensitive information or systems. While no patch version is currently specified, it is recomm...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

CVE-2024-25170

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

Exploit for Incorrect Authorization in Jupo Mezzanine

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.20...

CVE-2023-25170

creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:14+00:00| seen| https://t.me/cibsecurity/59912...

CVE-2023-25170 PrestaShop has possible CSRF token fixation

PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery CSRF. When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to...

CVE-2023-25170

PrestaShop prior to version 8.0.1 is vulnerable to Cross-site request forgery (CSRF) due to CSRF tokens not being cleared on login, allowing potential session-fixation-like attacks by attackers with network access. Affected component is the authentication/session management flow; root cause is to...

CVE-2022-25170

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2022-25170 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...