CVE-2018-25344

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering a structured exception handler overwrite. Attackers can craft a malicious registration key string...

CVE-2026-25344

creationtimestamp| type| source ---|---|--- 2026-04-07 12:30:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mivrsrts472c...

CVE-2021-25344

Missing permission check in knoxcustom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission...

CVE-2024-12751

Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

CVE-2024-25344

creationtimestamp| type| source ---|---|--- 2024-03-14 09:21:48+00:00| seen| https://t.me/ctinow/207562...

CVE-2024-25344

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...

CVE-2024-25344

CVE-2024-25344 relates to ITFlow.org prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378, described as a Cross Site Scripting/CSRF issue affecting multiple settings components (settings.php, settings+company.php, settings_defaults.php, settings_integrations.php, settings_invoice.php, setti...

CVE-2023-25344

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:14+00:00| seen| https://t.me/cibsecurity/60093...

CVE-2023-25344

An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function...

CVE-2023-25344

An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function...

CVE-2023-25344

CVE-2023-25344 affects swig-templates <= 2.0.4 and swig

CVE-2023-25344

An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function...

1095h-cli (=1.0.1), 5coder-pages (=0.2.0) +548 more potentially affected by CVE-2023-25344 via swig-templates (>=2.0.2 <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.0.1-alpha.0 and more Source cves: CVE-2023-25344 Source advisory: SNYK:JS-SWIGTEMPLATES-3266806...

CVE-2022-25344

creationtimestamp| type| source ---|---|--- 2022-04-20 16:25:14+00:00| seen| https://t.me/cibsecurity/41167...

CVE-2022-25344

The CVE-2022-25344 entry describes a reflected XSS in the web interface of the Kyocera/Olivetti d-COLOR MF3555 device (2XD_S000.002.271). The vulnerability stems from improper validation of POST parameters sent to /dvcset/sysset/set.cgi via the arg01.Hostname field, which are saved on the server ...

CVE-2021-25344

creationtimestamp| type| source ---|---|--- 2021-03-05 00:47:11+00:00| seen| https://t.me/cibsecurity/24485...

CVE-2021-25344

Missing permission check in knoxcustom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission...

CVE-2021-25344

Missing permission check in knoxcustom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission...

CVE-2021-25344

The CVE-2021-25344 issue affects Samsung knox_custom service (mobile app). Root cause: missing privilege check in knox_custom before SMR Mar-2021 Release 1. Impact: attacker may access the device serial number without permission (local attack). Public details confirm the vulnerability and timing;...