18 matches found
CVE-2026-29100
creationtimestamp| type| source ---|---|--- 2026-03-24 16:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsy57rte42f...
CVE-2026-29100
Summary: CVE-2026-29100 affects SuiteCRM. The vulnerability is a reflected HTML injection on the login page, enabling an attacker to inject arbitrary HTML content (e.g., phishing content or page defacement). The issue is associated with SuiteCRM version 7.15.0 and is fixed in 7.15.1. What’s affec...
CVE-2026-29100 SuiteCRM has Reflected HTML Injection in Login Page via default_user_name Parameter
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Versio...
CVE-2021-29100
creationtimestamp| type| source ---|---|--- 2025-04-10 15:49:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11267...
CVE-2025-29100
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list...
CVE-2025-29100
creationtimestamp| type| source ---|---|--- 2025-03-24 21:23:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8561 2025-03-25 01:05:50+00:00| seen| https://t.me/cvedetector/21013...
CVE-2025-29100
CVE-2025-29100 affects Tenda AC8 V16.03.34.06. The vulnerability is a buffer overflow in the fromSetRouteStatic function triggered via the parameter list, with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, network access, no user interaction). Some connected sources suggest a mitigati...
CVE-2025-29100
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list...
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.1.4 is vulnerable to Arbitrary File Upload
Software AI Engine: ChatGPT Chatbot Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-29100 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID cd77a38bda8f Credits Rafie Muhammad Patchstac...
CVE-2023-29100
creationtimestamp| type| source ---|---|--- 2023-06-23 16:47:04+00:00| seen| https://t.me/cibsecurity/65466...
CVE-2023-29100
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dream-Theme The7 plugin = 11.6.0 versions...
CVE-2023-29100
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dream-Theme The7 plugin = 11.6.0 versions...
CVE-2023-29100
CVE-2023-29100 affects Dream-Theme The7 WordPress theme (The7) with unauthenticated reflected XSS in versions
WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
Software The7 Type Theme Vulnerable versions = 11.6.0 Fixed in 11.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29100 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 24f83da1f799 Credits Rafie Muhammad Patchstack...
CVE-2021-29100
A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS...
CVE-2021-29100 ArcGIS Earth has a File Parsing Directory Traversal Vulnerability
A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS...
CVE-2021-29100
The CVE-2021-29100 issue affects Esri ArcGIS Earth 1.11.0 and earlier, due to a path traversal flaw in how input is processed (notably during file handling, including KMZ parsing). This allows an attacker to create arbitrary files and, under the user’s security context, potentially achieve arbitr...