CVE-2019-25459

creationtimestamp| type| source ---|---|--- 2026-02-26 21:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfs4rqn2g622...

CVE-2019-25459

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into parameters like emlakdurumu, emlaktipi, il, ilce, kelime, and semt to extract sensitive...

CVE-2019-25459

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into parameters like emlakdurumu, emlaktipi, il, ilce, kelime, and semt to extract sensitive...

CVE-2023-25459

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

CVE-2020-25459

An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...

CVE-2023-25459

creationtimestamp| type| source ---|---|--- 2023-08-08 16:14:16+00:00| seen| https://t.me/cibsecurity/67982...

CVE-2023-25459

CVE-2023-25459 affects the WordPress plugin Post Snippets (Postsnippets) up to v4.0.2. It is an admin-authenticated stored XSS via the snippet_content field; patch to v4.0.3. CVSS/impact details vary by source (NVD/Wordfence/Patchstack report low-to-medium risk; documented exploitation not provid...

CVE-2023-25459 WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

CVE-2023-25459 WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Post Snippets Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25459 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID db47be90330a Credits Abdi Pranata Required...

CVE-2020-25459

creationtimestamp| type| source ---|---|--- 2022-06-17 00:23:56+00:00| seen| https://t.me/cibsecurity/44693...

CVE-2020-25459

An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...

CVE-2020-25459

An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...

CVE-2020-25459

CVE-2020-25459 affects WeBank FATE (Federated AI Technology Enabler) versions 0.1–1.4.2, via the function sync_tree in hetero_decision_tree_guest.py, allowing an attacker to read sensitive information during training. Connected advisories corroborate the issue and note patches in affected project...

CVE-2022-25459

creationtimestamp| type| source ---|---|--- 2022-03-18 23:23:15+00:00| seen| https://t.me/cibsecurity/39278...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25459

The CVE-2022-25459 entry describes a stack overflow in the Tenda AC6 SetSysTimeCfg function (via the S1 parameter) affecting v15.03.05.09_multi. The root cause is a stack overflow in SetSysTimeCfg, leading to arbitrary command execution as the stated impact. No remediation details are provided in...

Mageia: Security Advisory (MGASA-2021-0049)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-25459

CVE-2021-25459 affects BlockchainTZService. The vulnerability is an improper access control in the sspInit() function that allows attackers to start the BlockchainTZService. Affected versions are prior to SMR Sep-2021 Release 1. Exploitation details are not provided beyond local access vectors im...