14 matches found
CVE-2026-15679
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...
CVE-2026-15679 Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...
CVE-2026-15679: Deserialization of Untrusted Data
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this...
CVE-2026-27987
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX The Qlean the-qlean allows PHP Local File Inclusion.This issue affects The Qlean: from n/a through = 2.12...
CVE-2024-27987
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through = 3.3.1...
CVE-2024-27987
creationtimestamp| type| source ---|---|--- 2024-03-15 12:26:26+00:00| seen| https://t.me/ctinow/208692 2024-03-15 12:31:30+00:00| seen| https://t.me/ctinow/208695 2025-02-19 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodssymu25...
CVE-2024-27987
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through = 3.3.1...
CVE-2024-27987
The StellarWP GiveWP (give) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in versions 3.3.1 and below . The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts into a website. Practical c...
CVE-2024-27987 WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through = 3.3.1...
WordPress GiveWP Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)
Software GiveWP Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27987 Patch priority Medium CVSS severity Medium 7.1 Developer Liquid Web / StellarWP PSID 221b899ac821 Credits Rafie Muhammad Patchstack Required...
CVE-2023-27987
creationtimestamp| type| source ---|---|--- 2023-04-10 12:22:28+00:00| seen| https://t.me/cibsecurity/61738...
CVE-2023-27987 Apache Linkis gateway module token authentication bypass
In Apache Linkis =1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default token for the attack. Generation rules should add random values. We recommend users upgrade the version of Linkis to version 1.3.2 And modify t...
CVE-2023-27987 Apache Linkis gateway module token authentication bypass
In Apache Linkis =1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default token for the attack. Generation rules should add random values. We recommend users upgrade the version of Linkis to version 1.3.2 And modify t...