CVE-2026-25727 time affected by a stack exhaustion denial of service attack

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: wash, atuin, qdrant, xh, cargo-c, komodo, kdash, sentry-cli, bat, topgrade, parseable, virtiofsd, quiche, sqlx, buck2, yazi, guestproxyagent, zola, uutils, ztunnel, shadowsocks-rust, oranda, zellij, watchexec, lychee, zizmor, deno, fnm, uv, rust-analyzer, berg,...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +9078 more potentially affected by CVE-2026-25727 via time (>=0.3.7, <=0.3.29)

time CARGO version =0.3.7, =0.1.0, =0.8.16, =0.3.2, =1.0.3, =0.1.0, =0.11.2, =0.2.0-beta.4, =0.15.1, =0.1.0, =0.0.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-25727 Source advisory: OSV:GHSA-R6V5-FH4H-64XC...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.8.16, <=0.10.15) +9078 more potentially affected by CVE-2026-25727 via time (>=0.3.7, <=0.3.29)

time CARGO version =0.3.7, =0.1.0, =0.8.16, =0.3.2, =1.0.3, =0.1.0, =0.11.2, =0.2.0-beta.4, =0.15.1, =0.1.0, =0.0.0, =0.1.0, =0.0.1, =0.1.2 and more Source cves: CVE-2026-25727 Source advisory: OSV:RUSTSEC-2026-0009...

CVE-2020-25727

The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field...

Debian: Security Advisory (DLA-4121-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-25727

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8355 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

Linux Distros Unpatched Vulnerability : CVE-2023-25727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface...

CVE-2025-25727

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5813 2025-02-28 01:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccut5un26 2025-02-28 03:38:48+00:00| seen|...

CVE-2025-25727

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext...

CVE-2025-25727

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext...

CVE-2025-25727

CVE-2025-25727 affects Bosscomm IF740 devices: Firmware 11001.7078 and v11001.0000, and System versions 6.25 and 6.00. The vulnerability is that passwords are stored in cleartext, enabling exposure of credentials. CVSS3.1 base score 6.2 (Medium) with Local attack, no user interaction, confidentia...

CVE-2022-25727

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2023:0047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : phpMyAdmin (openSUSE-SU-2023:0047-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0047-1 advisory. - PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lan...

SUSE CVE-2023-25727

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface...

CVE-2023-25727

CVE-2023-25727 is an authenticated-user XSS in phpMyAdmin triggered by uploading a crafted .sql file via drag-and-drop. Public details in the connected sources identify affected versions as: phpMyAdmin before 4.9.11 and 5.x before 5.2.1. Debian LTS advisory DLA-4121-1 notes that Debian Bullseye p...

CVE-2023-25727

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface...

XSS vulnerability in drag-and-drop upload

PMASA-2023-1 Announcement-ID: PMASA-2023-1 Date: 2023-02-07 Summary XSS vulnerability in drag-and-drop upload Description An XSS vulnerability has been discovered where an authenticated user can trigger an XSS attack by uploading a specially-crafted .sql file through the drag-and-drop interface...

CVE-2022-25727

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...