16 matches found
CVE-2018-25230
creationtimestamp| type| source ---|---|--- 2026-03-30 12:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibpo52z2z2g...
CVE-2026-25230
FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction. This vulnerability is...
EUVD-2024-25230
Malicious code in bioql PyPI...
CVE-2022-25230
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325...
CVE-2020-25230
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...
CVE-2025-25230
Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges...
CVE-2025-25230
creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3lfldo2q 2025-04-17 02:06:41+00:00| seen| https://t.me/cvedetector/23202 2025-04-17 03:17:12+00:00| seen|...
CVE-2025-25230
Affected product: Omnissa Horizon Client for Windows. Description: a local privilege escalation (LPE) vulnerability exists that could allow a local attacker with access to the Horizon Client installation to elevate privileges. Reported remediation: fixed version 2503 is available (per PacketStorm...
Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25230)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device. This plugin only works with Tenable.ot. Please visi...
CVE-2023-25230
creationtimestamp| type| source ---|---|--- 2023-03-07 20:23:44+00:00| seen| https://t.me/cibsecurity/59602...
CVE-2023-25230
The CVE-2023-25230 SSRF is reported in loonflow r2.0.14. The vulnerability arises from a flaw in the hook_url parameter, allowing an attacker to force the application to make arbitrary external requests. Public sources (e.g., PT-2023-19995, Red Hat, NVD) confirm the issue and describe potential i...
CVE-2022-25230
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325...
CVE-2022-25230
CX-Programmer in the CX-One v4.60 suite is affected by a Use-After-Free vulnerability (CVE-2022-25230) in versions up to 9.76.1, which can trigger information disclosure or arbitrary code execution when a user opens a crafted CXP file. The issue’s root cause is a use-after-free condition in CX-Pr...
CVE-2021-25230
The CVE-2021-25230 entry concerns Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1 with an improper access control flaw that allows an unauthenticated user to obtain information from a scan connection exception file. Public disclosures map the vulnerability to a fault in the web cons...
CVE-2020-25230
creationtimestamp| type| source ---|---|--- 2020-12-15 00:39:46+00:00| seen| https://t.me/cibsecurity/20795...
CVE-2020-25230
Siemens LOGO! 8 BM (incl. SIPLUS variants) is affected by CVE-2020-25230 due to use of an outdated cipher mode on port 10005/tcp, which could allow an attacker to extract the encryption key from captured traffic. Affected versions are all prior to v8.3. Siemens has released updates to version 8.3...