CVE-2026-28039

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpDataTables wpDataTables wpdatatables allows PHP Local File Inclusion.This issue affects wpDataTables: from n/a through = 6.5.0.1...

Linux Distros Unpatched Vulnerability : CVE-2020-28039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is...

CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter...

CVE-2025-28039

creationtimestamp| type| source ---|---|--- 2025-04-22 20:19:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkv5l32j 2025-04-22 21:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114383815074253600...

CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter...

CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter...

CVE-2025-28039

The TOTOLINK EX1200T (version 4.1.2cu.5232_B20210713 ) is vulnerable to a pre-auth remote command execution vulnerability within the setUpgradeFW function. The root cause is the improper neutralization of special elements used in an OS command, specifically through the FileName parameter. A remot...

CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter...

CVE-2024-28039

creationtimestamp| type| source ---|---|--- 2024-03-18 10:21:33+00:00| seen| https://t.me/ctinow/210352 2024-03-18 10:26:56+00:00| seen| https://t.me/ctinow/210353...

CVE-2024-28039

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service DoS condition...

CVE-2024-28039

A vulnerability exists in FitNesse (all releases) due to an improper restriction of XML external entity references (CWE-611). This flaw allows a remote, unauthenticated attacker to obtain sensitive information, alter data, or trigger a denial-of-service (DoS) condition. To mitigate this risk, the...

CVE-2024-28039

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service DoS condition...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated user with administrator privileges to modify a UEFI variable. The issue affects Dell BIOS firmware and is described across multiple sources (e.g., Dell KB article DSA-2023-099). No exploitation de...

Mageia: Security Advisory (MGASA-2021-0117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-28039

creationtimestamp| type| source ---|---|--- 2021-03-05 20:47:59+00:00| seen| https://t.me/cibsecurity/24544...

CVE-2021-28039

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has...

CVE-2021-28039

CVE-2021-28039 affects the Linux kernel 5.9.x–5.11.3 (used with Xen). In some configurations, an x86 PV guest OS user can crash the Dom0 or a driver domain by generating a large amount of I/O. Root cause is the misuse of guest physical addresses when CONFIG_XEN_UNPOPULATED_ALLOC is set but CONFIG...

Fedora: Security Advisory for wordpress (FEDORA-2020-b386fac43a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...