17 matches found
PT-2026-7828
CVE-2026-25981 - Apache HTTP Server Deserialization CVE ID : CVE-2026-25981 Published : 2026年2月10日 05:16 | 1 小时，59 分钟 ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
EUVD-2024-25981
Malicious code in bioql PyPI...
CVE-2023-25981
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form plugin = 2.8.1 versions...
CVE-2024-25981
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25981
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25981
CVE-2024-25981 affects Moodle: Separate Groups mode restrictions were not honored during a forum export, causing data from all groups to be exported. By default this granted additional access to non-editing teachers. The connected documents confirm this is a Moodle forum export behavior issue; no...
CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...
CVE-2023-25981
creationtimestamp| type| source ---|---|--- 2023-08-25 14:14:04+00:00| seen| https://t.me/cibsecurity/69188...
CVE-2023-25981
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form plugin = 2.8.1 versions...
CVE-2023-25981 WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form plugin = 2.8.1 versions...
CVE-2023-25981
CVE-2023-25981 is a Stored Cross-Site Scripting (XSS) vulnerability in WordPress BuddyForms plugin versions up to 2.8.1. The issue arises from insufficient input escaping in the Post Form workflow, enabling an attacker with Contributor privileges to inject scripts into a site. A fixed version is ...
CVE-2021-25981
creationtimestamp| type| source ---|---|--- 2022-01-03 12:38:20+00:00| seen| https://t.me/cibsecurity/34843...
CVE-2021-25981
In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attack...
CVE-2021-25981
CVE-2021-25981 affects Talkyard. Versions v0.2021.20–v0.2021.33 (regular) and v0.2021.20–v0.2021.34 (dev) are vulnerable to Insufficient Session Expiration. The underlying issue allows an attacker who can obtain a still-valid admin session token (via other, hypothetical attacks) to reuse that tok...
skynet.be XSS vulnerability
Vulnerable URL: http://www.skynet.be/services//recherche/google?cx=partner-pub-9744292032263079:5461966790%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E%27-confirmOPENBUGBOUNTY-%27=FORID:10=UTF-8=8232389543=0982551502 Details: Description| Value ---|--- Patched:| Yes, at 16.01.2018...