CVE-2018-25413

creationtimestamp| type| source ---|---|--- 2026-05-30 17:27:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3l5as7yl2i...

CVE-2019-25413

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameter. Attackers can craft requests to the /manage/ips/rules/ endpoint with script payloads in the ID parameter to execut...

CVE-2024-25413

creationtimestamp| type| source ---|---|--- 2024-02-16 03:22:03+00:00| seen| https://t.me/ctinow/186093 2024-03-08 08:56:38+00:00| seen| https://t.me/ctinow/203153 2025-03-26 14:25:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8857...

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

CVE-2023-25413

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials...

MaxSite CMS Cross-Site Scripting Vulnerability (CNVD-2022-33826) (CVE-2022-25413)

MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.MaxSite CMS 108 has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks via the ftags parameter in /admin/pageedit/3...

CVE-2022-25413

creationtimestamp| type| source ---|---|--- 2022-03-01 02:28:39+00:00| seen| https://t.me/cibsecurity/38219...

CVE-2022-25413

Maxsite CMS v108 is affected by a stored cross-site scripting (XSS) vulnerability through the f_tags parameter in /admin/page_edit/3 . The issue is evidenced across multiple sources (NVD, CNVD, Red Hat, OSV, CVE listings) under CVE-2022-25413, confirming the vulnerable component and entry. The pr...

CVE-2021-25413

CVE-2021-25413 affects Samsung Contacts prior to SMR June-2021 Release 1. The root cause is improper sanitization of incoming intents, enabling a local attacker to access arbitrary data within the Samsung Contacts privilege. Impact is partial confidentiality exposure of data via a local vector. T...