22 matches found
CVE-2019-25574
creationtimestamp| type| source ---|---|--- 2026-03-21 15:16:00+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25574 2026-03-21 18:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlmkegaai24...
CVE-2026-25574
Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direct Object Reference IDOR vulnerability exists in the payload-preferences internal collection. In multi-auth collection environments using Postgres or SQLite with default...
@01.software/sdk (>=0.0.1-251008.90016, <=0.1.4), @adenta/cms (>=0.0.6, <=1.1.1-0) +71 more potentially affected by CVE-2026-25574 via payload (>=0.8.2, <=3.74.0-internal.bc57c0d)
payload NPM version =0.8.2, =0.0.1-251008.90016, =0.0.6, =0.0.1, =1.0.1-beta.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.0.1, =3.1.0-types, =3.1.0 and more Source cves: CVE-2026-25574 Source advisory: MEND:CVE-2026-25574...
@01.software/sdk (>=0.0.1-251008.90016, <=0.1.4), @adenta/cms (>=0.0.6, <=1.1.1-0) +27 more potentially affected by CVE-2026-25574 via payload (>=3.0.0-alpha.49, <=3.74.0-internal.bc57c0d)
payload NPM version =3.0.0-alpha.49, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =3.64.0, =0.0.1-beta.0, =0.2.0, =0.2.14 - @remy90/payload-conditions-plugin 0.2.2 and more Source cves: CVE-2026-25574 Source advisory: OSV:GHSA-JQ29-R496-R955...
@01.software/sdk (>=0.0.1-251008.90016, <=0.1.4), @adenta/cms (>=0.0.6, <=1.1.1-0) +27 more potentially affected by CVE-2026-25574 via payload (>=3.0.0-alpha.49, <=3.74.0-internal.bc57c0d)
payload NPM version =3.0.0-alpha.49, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =1.0.0, =3.64.0, =0.0.1-beta.0, =0.2.0, =0.2.14 - @remy90/payload-conditions-plugin 0.2.2 and more Source cves: CVE-2026-25574 Source advisory: GHSA-JQ29-R496-R955...
Linux Distros Unpatched Vulnerability : CVE-2020-25574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve could result in denial of service e.g., an infinite...
CVE-2020-25574
An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve could result in denial of service e.g., an infinite loop...
CVE-2023-25574
jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...
CVE-2023-25574 JupyterHub's LTI13Authenticator: JWT signature not validated
jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...
CVE-2023-25574
CVE-2023-25574 concerns jupyterhub-ltiauthenticator’s LTI13Authenticator. The issue: LTI13Authenticator, added in version 1.3.0, did not validate JWT signatures, potentially allowing forged authentication requests when the JupyterHub instance is configured to use this authenticator. Affected depl...
CVE-2023-25574 JupyterHub's LTI13Authenticator: JWT signature not validated
jupyterhub-ltiauthenticator is a JupyterHub authenticator for learning tools interoperability LTI. LTI13Authenticator that was introduced in jupyterhub-ltiauthenticator 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only use...
CVE-2024-25574
SQL injection vulnerability exists in GetDIAEusListParameters...
CVE-2024-25574
Delta Electronics DIAEnergie is affected by a SQL injection vulnerability in GetDIAE_usListParameters. The related ICS/CISA advisory (ICSA-24-074-12) documents multiple SQL injection instances across DIAEnergie components, with CVSS v3.1 base scores up to 8.8 in the family and a high-impact profi...
CVE-2024-25574 Delta Electronics DIAEnergie SQL Injection
SQL injection vulnerability exists in GetDIAEusListParameters...
SUSE CVE-2019-25008
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-25574. Reason: This candidate is a duplicate of CVE-2020-25574. Notes: All CVE users should reference CVE-2020-25574 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2022-25574
creationtimestamp| type| source ---|---|--- 2022-03-25 19:30:57+00:00| seen| https://t.me/cibsecurity/39547 2022-12-24 08:23:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3625 2023-01-29 12:39:15+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2565...
CVE-2022-25574
A stored cross-site scripting XSS vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file...
CVE-2022-25574
CVE-2022-25574 describes a stored XSS in the upload function /admin/show.php, affecting DouPHP (and related DouPhp/DouShell references in the connected entries). The root cause is insufficient input validation/escaping in the image upload pathway, allowing crafted image files to execute arbitrary...
