CVE-2024-25767

nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c...

CVE-2025-25767

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...

CVE-2025-25767

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:13+00:00| seen| https://t.me/cvedetector/18686...

CVE-2025-25767

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...

CVE-2025-25767

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...

CVE-2025-25767

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...

CVE-2024-25767

creationtimestamp| type| source ---|---|--- 2024-02-26 18:26:39+00:00| seen| https://t.me/ctinow/193615 2024-02-26 18:32:17+00:00| seen| https://t.me/ctinow/193622...

CVE-2024-25767

nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c...

CVE-2024-25767

The nanomq MQTT broker (version 0.21.2 ) is affected by a Use-After-Free vulnerability located in the /nanomq/nng/src/core/socket.c file. This issue stems from a post-release reuse vulnerability within the software's core components. While the vulnerability's impact on availability is rated as hi...

CVE-2023-25767

creationtimestamp| type| source ---|---|--- 2023-02-15 16:36:34+00:00| seen| https://t.me/cibsecurity/58226...

org.jenkins-ci.plugins:azure-vmss (0.1.1) potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.3.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-vmss 0.1.1 Source cves: CVE-2023-25767 Source...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25767 Source...

CVE-2023-25767

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.2.4), org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2) +8 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (>=1.0, <=1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version =1.0, =0.1.0, =0.1, =0.3.0, =0.6.0, =3.0.0, =0.1.0, =1.0.0, =0.4.8, =0.1.0, =1.3, =1.5 Source cves: CVE-2023-25767 Source advisory: MEND:CVE-2023-25767...

CVE-2023-25767

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

CVE-2023-25767

CVE-2023-25767 is a CSRF vulnerability affecting Jenkins Azure Credentials Plugin in versions up to 253.v887e0f9e898b and earlier. The Red Hat and OSV entries confirm the flaw permits an attacker to trigger actions that cause the Jenkins client to connect to an attacker-controlled web server, due...

CVE-2023-25767

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

CVE-2023-25767

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2022-25767 Source advisory: OSV:GHSA-W39X-CHVM-PJ3C...

CVE-2022-25767

CVE-2022-25767 affects all versions of the Java package com.bstek.ureport:ureport2-console. The vulnerability enables Remote Code Execution via deserialization when the system connects to a malicious database server, leading to arbitrary file reads and deserialization of local gadgets. Multiple s...