18 matches found
CVE-2024-25431
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...
CVE-2021-25431
Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
creationtimestamp| type| source ---|---|--- 2025-02-28 18:26:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5943 2025-02-28 22:03:08+00:00| seen| https://t.me/cvedetector/19186 2025-03-02 11:45:38+00:00| seen| Telegram/rhKSWDAUe15XeDKZUaIe9kagESzkvoi0C6GKwdau-MypfdM...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25431
The CVE-2025-25431 entry concerns TRENDnet TEW-929DRU (firmware 1.0.0.10). A Stored Cross-Site Scripting (XSS) flaw exists in the /captive_portal.htm page, exploitable via the wifi_data/ssid field in the request (likely via wifi_data[ssid]). Multiple sources corroborate the issue and describe it ...
Azure Linux 3.0 Security Update: fluent-bit (CVE-2024-25431)
The version of fluent-bit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25431 advisory. - An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a...
CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1
CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1. A patched version of the package is available...
CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-25431)
The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25431 advisory. - An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a...
CVE-2024-25431 affecting package fluent-bit for versions less than 2.2.3-5
CVE-2024-25431 affecting package fluent-bit for versions less than 2.2.3-5. A patched version of the package is available...
CVE-2024-25431
creationtimestamp| type| source ---|---|--- 2024-11-08 17:11:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113448443191850740 2024-11-08 18:52:56+00:00| seen| https://t.me/cvedetector/10206...
CVE-2023-25431
creationtimestamp| type| source ---|---|--- 2023-02-28 20:27:58+00:00| seen| https://t.me/cibsecurity/59130...
CVE-2023-25431
CVE-2023-25431 affects Online Reviewer Management System v1.0, with a XSS vulnerability exploitable via reviewer_0/admins/assessments/course/course-update.php. The issue is documented across multiple feeds (NVD/Red Hat/CVE lists) as an input/output reflection flaw that can be triggered through th...
CVE-2022-25431
creationtimestamp| type| source ---|---|--- 2022-03-18 23:23:25+00:00| seen| https://t.me/cibsecurity/39282...
CVE-2022-25431
Summary: CVE-2022-25431 affects Tenda AC9 firmware, specifically version 15.03.2.21, due to multiple stack overflows in the Formsetqosband function triggered via NPTR, V12, V10, and V11 parameters. This vulnerability is described as potentially allowing arbitrary command execution and is rated CR...
CVE-2021-25431
CVE-2021-25431 affects Cameralyzer prior to versions 3.2.1041 (3.2.x), 3.3.1040 (3.3.x), and 3.4.4210 (3.4.x). Root cause: improper access control allowing untrusted applications to access certain Cameralyzer functions. Reported across multiple feeds (NVD, Red Hat CVE, PRION, CNNVD). Affected sof...