17 matches found
CVE-2026-25984
This CVE was assigned in error...
CVE-2023-25984
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rigorous & Factory Pattern Dovetail plugin = 1.2.13 versions...
CVE-2024-25984
In dumpBatteryDefend of dumppower.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-25984
An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...
CVE-2025-25984
An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...
CVE-2025-25984
An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...
Exploit for Observable Discrepancy in Macro-Video V380_Pro
v380 IP camera research !Report versionhttps://img.shields...
CVE-2024-25984
creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:51+00:00| seen| https://t.me/ctinow/205032...
CVE-2024-25984
In dumpBatteryDefend of dumppower.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-25984
A heap buffer overflow in the dumpBatteryDefend function of dump_power.cpp leads to an out-of-bounds read . This vulnerability affects the dumpstate component on Google Pixel devices and may result in local information disclosure without requiring additional execution privileges or user interacti...
CVE-2023-25984
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rigorous & Factory Pattern Dovetail plugin = 1.2.13 versions...
CVE-2023-25984
CVE-2023-25984 is a stored XSS vulnerability in the WordPress plugin Dovetail (Rigorous & Factory Pattern) version ≤ 1.2.13, requiring admin+ authentication. The Red Hat and Patchstack entries confirm the issue and indicate the remediation path: upgrade to a version later than 1.2.13. Public expl...
WordPress Dovetail Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)
Software Dovetail Type Plugin Vulnerable versions = 1.2.13 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25984 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f4d20e88e917 Credits Ullash Raj Required privilege...
CVE-2021-25984
creationtimestamp| type| source ---|---|--- 2021-11-17 16:14:43+00:00| seen| https://t.me/cibsecurity/32454...
CVE-2021-25984 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality
In Factor App Framework & Headless CMS forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting XSS at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...
CVE-2021-25984
CVE-2021-25984 affects Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3–v1.8.30. The root cause is stored XSS in the post reply functionality, allowing unauthenticated attackers to execute malicious JavaScript and steal session cookies. No remediation details are provided in th...