18 matches found
CVE-2026-26047 Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service
A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade...
CVE-2026-26047 Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service
A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade...
CVE-2026-26047
creationtimestamp| type| source ---|---|--- 2026-02-17 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n76nw5322...
CVE-2025-26047
creationtimestamp| type| source ---|---|--- 2025-02-28 16:27:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5920 2025-02-28 17:38:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljax4rql2x2w 2025-02-28 19:32:26+00:00| seen| https://t.me/cvedetector/19...
CVE-2025-26047
Loggrove v1.0 is vulnerable to SQL Injection in the read.py file...
CVE-2025-26047
Loggrove v1.0 is affected by an SQL injection in the read.py file. CVSS 3.1 base score 5.1 (Medium); attack vector Local, no user interaction required, but privileges required: None; confidentiality and integrity impacts listed as Low, availability impact none. Affected component appears to be a ...
CVE-2024-26047 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-26047
Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue could allow an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. ...
CVE-2024-26047 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2023-26047 teler-waf contains detection rule bypass via entities payload
teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...
Intel PROSet Wireless WiFi, Intel vPro CSME WiFi and Killer WiFi Advisory - Lenovo Support US
No description provided...
CVE-2022-26047
creationtimestamp| type| source ---|---|--- 2022-11-13 05:45:26+00:00| seen| https://t.me/cibsecurity/52896 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2022-26047
Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...
CVE-2022-26047
Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...
CVE-2022-26047
Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...
CVE-2022-26047
CVE-2022-26047 affects Intel® PROSet/Wireless WiFi firmware prior to 22.140, Killer™ WiFi firmware prior to 3.1122.3158, and the associated UEFI 2.2.14.22176.2. The root cause is improper input validation in certain Intel PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi components, w...