13 matches found
CVE-2026-25324
Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...
CVE-2026-25324
Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25324
The AiShanDong (爱山东) application mall system, developed by the Chinese company AiShanDong, is affected by a security vulnerability in version 5.0.0 for iOS . The flaw stems from Improper Neutralization of Encoded URI Schemes in a Web Page (CWE-84), which allows an attacker to access sensitive use...
CVE-2022-25324
creationtimestamp| type| source ---|---|--- 2022-05-07 00:23:01+00:00| seen| https://t.me/cibsecurity/42159...
1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)
bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: OSV:GHSA-6429-3G3W-6MW5...
CVE-2022-25324
CVE-2022-25324 affects the npm package bignum. The DoS arises from a type-check exception in V8 when verifying the second argument to the powm function, causing crashes that bypass Node try/catch blocks. Affected versions are not fixed by any known version; remediation is not available. Related a...
CVE-2022-25324
All versions of package bignum are vulnerable to Denial of Service DoS due to a type-check exception in V8, when verifying the type of the second argument to the .powm function, V8 will crash regardless of Node try/catch blocks...
1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)
bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...
CVE-2021-25324
creationtimestamp| type| source ---|---|--- 2021-01-19 18:56:16+00:00| seen| https://t.me/cibsecurity/22279...
CVE-2021-25324
CVE-2021-25324 affects MISP 2.4.136 with a Stored XSS flaw in the galaxy cluster view (app/View/GalaxyClusters/view.ctp). Root cause details are not fully disclosed in the provided documents, but the vulnerability is described by multiple sources as a cross-site scripting issue that could impact ...