CVE-2023-25984

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rigorous & Factory Pattern Dovetail plugin = 1.2.13 versions...

CVE-2024-25984

In dumpBatteryDefend of dumppower.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

Exploit for Observable Discrepancy in Macro-Video V380_Pro

v380 IP camera research !Report versionhttps://img.shields...

CVE-2024-25984

creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:51+00:00| seen| https://t.me/ctinow/205032...

CVE-2024-25984

In dumpBatteryDefend of dumppower.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25984

The CVE-2024-25984 issue affects Google/Android devices, referencing a heap-buffer overflow in the dumpBatteryDefend path of dump_power.cpp that can trigger an out-of-bounds read and local information disclosure without user interaction or extra privileges. Public sources (Pixel security bulletin...

CVE-2023-25984

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rigorous & Factory Pattern Dovetail plugin = 1.2.13 versions...

CVE-2023-25984

CVE-2023-25984 is a stored XSS vulnerability in the WordPress plugin Dovetail (Rigorous & Factory Pattern) version ≤ 1.2.13, requiring admin+ authentication. The Red Hat and Patchstack entries confirm the issue and indicate the remediation path: upgrade to a version later than 1.2.13. Public expl...

WordPress Dovetail Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)

Software Dovetail Type Plugin Vulnerable versions = 1.2.13 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25984 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f4d20e88e917 Credits Ullash Raj Required privilege...

CVE-2021-25984

creationtimestamp| type| source ---|---|--- 2021-11-17 16:14:43+00:00| seen| https://t.me/cibsecurity/32454...

CVE-2021-25984

CVE-2021-25984 affects Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3–v1.8.30. The root cause is stored XSS in the post reply functionality, allowing unauthenticated attackers to execute malicious JavaScript and steal session cookies. No remediation details are provided in th...

CVE-2021-25984 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality

In Factor App Framework & Headless CMS forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting XSS at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2026-25984

...