16 matches found
CVE-2019-25615
creationtimestamp| type| source ---|---|--- 2026-03-22 14:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnrj4xfdw2n...
CVE-2026-25615
creationtimestamp| type| source ---|---|--- 2026-02-03 21:29:13+00:00| seen| Telegram/MYHZanq17TaXENBpOYfEDdxEAZSXp-WT-Pftz2e13XuWFk...
CVE-2026-25615
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668...
CVE-2024-25615
An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...
CVE-2025-25615
creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7002 2025-03-10 15:40:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7j5upa2f 2025-03-10 16:31:59+00:00| seen| https://t.me/cvedetector/19...
CVE-2025-25615
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections...
CVE-2025-25615
Unifiedtransform 2.0 is affected by an incorrect access control vulnerability that allows viewing attendance lists for all class sections. The issue is a confidentiality-related flaw in access control, enabling unauthorized exposure of attendance data without exploitation details provided in the ...
CVE-2024-25615
creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:23+00:00| seen| https://t.me/ctinow/200758 2024-03-05 22:32:13+00:00| seen| https://t.me/ctinow/200768 2025-03-27 20:27:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9198...
CVE-2024-25615
ArubaOS 8.x Spectrum service (via PAPI) is affected by a DoS vulnerability rooted in insufficient input validation. An unauthenticated remote attacker can interrupt normal operation of the Spectrum service. Exposed versions: ArubaOS 8.x. The cited PT-2024-2047 advisory recommends upgrading to a f...
CVE-2023-25615
creationtimestamp| type| source ---|---|--- 2023-03-14 12:54:07+00:00| seen| https://t.me/cibsecurity/59948 2025-02-27 18:26:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5736...
CVE-2023-25615
Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead t...
CVE-2023-25615
SAP ABAP Platform SQL Injection (CVE-2023-25615): Affected versions include 751, 753, 754, 756, 757, 791. Root cause is insufficient input sanitization; an authenticated high-privileged user can inject malicious database queries over the network to alter the current session and access unintended ...
CVE-2023-25615 SQL Injection vulnerability in SAP ABAP Platform
Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead t...
CVE-2022-25615
Cross-Site Request Forgery CSRF in StylemixThemes eRoom – Zoom Meetings & Webinar WordPress plugin = 1.3.8 allows cache deletion...
CVE-2022-25615
The CVE-2022-25615 entry applies to the WordPress plugin StylemixThemes eRoom – Zoom Meetings & Webinar (versions ≤ 1.3.8). The vulnerability is a Cross‑Site Request Forgery (CSRF) that can lead to cache deletion . The root cause is lack of CSRF protection during cache deletion operations, enabli...
CVE-2022-25615 WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion
Cross-Site Request Forgery CSRF in StylemixThemes eRoom – Zoom Meetings & Webinar WordPress plugin = 1.3.8 allows cache deletion...