CVE-2026-3065

creationtimestamp| type| source ---|---|--- 2026-02-24 05:56:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfliaovwdd2e...

CVE-2026-3065

CVE-2026-3065 affects HummerRisk up to 1.5.0, specifically the Cloud Task Dry-run component. The issue is in the function CommandUtils.commonExecCmdWithResult of CloudTaskService.java, where manipulating the fileName argument enables command injection. Remote exploitation is possible, and the exp...

CVE-2026-3065 HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection

A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult of the file CloudTaskService.java of the component Cloud Task Dry-run. Performing a manipulation of the argument fileName results in command injection. Remote exploitation of the...

CVE-2026-3065

A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult of the file CloudTaskService.java of the component Cloud Task Dry-run. Performing a manipulation of the argument fileName results in command injection. Remote exploitation of the...

EUVD-2023-43756

Malicious code in bioql PyPI...

CVE-2022-3065

Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...

CVE-2025-3065

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13210 2025-04-24 10:15:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkhz7q6w32b 2025-04-24 11:48:18+00:00| seen|...

CVE-2025-3065 Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote co...

CVE-2025-3065

CVE-2025-3065 affects the WordPress plugin Database Toolset (

Linux Distros Unpatched Vulnerability : CVE-2010-3065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PSUNDEFMARKER marker, which allows context-dependent...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-3065)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3065

Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20...

Code injection

Anonymous user may get the list of existing users managed by the application, that could ease further attacks see CVE-2023-3065 and 3066This issue affects Mobatime mobile application AMXGT100 through 1.3.20...

CVE-2023-3065 Mobatime mobile application - Authentication bypass

Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20...

CVE-2023-3065

CVE-2023-3065 concerns the Mobatime mobile app AMXGT100, with an improper authentication flaw that enables authentication bypass up to version 1.3.20. The available description states the vulnerability is in the authentication mechanism and affects the Mobatime AMXGT100 application, but it does n...

CVE-2023-3065 Mobatime mobile application - Authentication bypass

Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20...

SUSE CVE-2010-3065

The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PSUNDEFMARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Asset and Service Management

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 5, 6, and 7 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Industry Solutions including Maximo for Government, Maximo fo...

CVE-2022-3065

creationtimestamp| type| source ---|---|--- 2022-09-02 22:39:26+00:00| seen| https://t.me/cibsecurity/49253...

CVE-2022-3065

Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...