17 matches found
CVE-2026-26351
creationtimestamp| type| source ---|---|--- 2026-02-25 01:16:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnj3b2csr2e...
CVE-2025-5823: Exposed Dangerous Method or Function
Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is...
CVE-2025-26351
A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...
CVE-2025-26351
creationtimestamp| type| source ---|---|--- 2025-02-12 14:35:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113991414694623575...
CVE-2025-26351
CVE-2025-26351 describes a CWE-35 path traversal in the template download mechanism of Q-Free MaxTime (versions ≤ 2.11.0). An authenticated remote attacker can read sensitive files via crafted HTTP requests. Root cause: improper validation in the template download flow enabling path traversal. Im...
CVE-2025-26351
A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...
CVE-2024-26351
creationtimestamp| type| source ---|---|--- 2024-02-22 15:26:47+00:00| seen| https://t.me/ctinow/190811 2024-02-22 15:27:01+00:00| seen| https://t.me/ctinow/190822...
CVE-2024-26351
The flusity-CMS software, version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is located specifically within the /core/tools/update_place.php component. The vulnerability allows for unauthorized actions to be performed on behalf of an authenticated user. Whil...
CVE-2023-26351
creationtimestamp| type| source ---|---|--- 2023-03-29 00:46:01+00:00| seen| https://t.me/cibsecurity/60956...
CVE-2023-26351
CVE-2023-26351 refers to Adobe Dimension USD file parsing: an out-of-bounds read in Dimension 3.4.7 and earlier could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). A fixed version is 3.4.8 (per APSB23-20; advisory notes a security update ...
Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20) (macOS)
The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory. - Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could...
CVE-2021-26351
creationtimestamp| type| source ---|---|--- 2022-05-12 22:36:35+00:00| seen| https://t.me/cibsecurity/42546...
CVE-2021-26351
CVE-2021-26351 corresponds to an insufficient DRAM address validation vulnerability in the AMD System Management Unit (SMU), which may allow a DMA read/write to an invalid DRAM address and cause a denial of service. Connected AMD advisories (AMD-SB-1027) map this issue to AMD platforms across des...
Breaking RSA through Insufficiently Random Primes
Basically, the SafeZone library doesnt sufficiently randomize the two prime numbers it used to generate RSA keys. Theyre too close to each other, which makes them vulnerable to recovery. There arent many weak keys out there, but there are some: So far, Böck has identified only a handful of keys i...