CVE-2024-26577

VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service application hang via a spoofed UDP packet containing at least 10 digits in JSON data...

CVE-2023-26577

Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in user...

CVE-2025-26577

Cross-Site Request Forgery CSRF vulnerability in daxiawp DX-auto-publish dx-auto-publish allows Stored XSS.This issue affects DX-auto-publish: from n/a through = 1.2...

CVE-2025-26577

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uvyx2yr2d 2025-02-13 14:56:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113997156332156333 2025-02-13 15:10:16+00:00| seen|...

CVE-2025-26577

CVE-2025-26577 affects the WordPress plugin DX-auto-publish (versions up to and including 1.2). The issue is described as a Cross-Site Request Forgery (CSRF) that enables Stored XSS. Public details in connected documents identify the vulnerability class and affected software but do not provide an...

CVE-2025-26577 WordPress DX-auto-publish plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in daxiawp DX-auto-publish dx-auto-publish allows Stored XSS.This issue affects DX-auto-publish: from n/a through = 1.2...

CVE-2023-26577 Stored Cross-site Scripting In IDAttend’s IDWeb Application

Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in user...

CVE-2023-26577

CVE-2023-26577 affects IDAttend’s IDWeb application (versions 3.1.052 and earlier). The issue is a stored cross-site scripting vulnerability that allows an attacker to hijack the browsing session of a logged-in user. Root cause: stored XSS in the IDWeb component. Impact is session hijacking as de...

CVE-2021-26577

creationtimestamp| type| source ---|---|--- 2021-02-08 22:39:49+00:00| seen| https://t.me/cibsecurity/23251...

CVE-2021-26577

The CVE-2021-26577 issue affects the BMC firmware in HPE Apollo 70 System prior to 3.0.14.0. A local buffer overflow in the libifc.so uploadsshkey function is the root cause. Impact is high due to potential control over the BMC from a local fault, with all confidentiality, integrity, and availabi...

CVE-2021-26577

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function...