CVE-2023-08-21-exploit

Exploit Title: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1; xhr2.open'PATCH',...

ROOT-OS-DEBIAN-13-CVE-2026-31470 CVE-2026-31470 in linux - Patched by Root

Root has patched CVE-2026-31470 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31470 CVE-2026-31470 in linux - Patched by Root

Root has patched CVE-2026-31470 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

BELL-CVE-2026-31470

Bulletin has no description...

DEBIAN-CVE-2026-31470

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quote are copied out to guest userspace. In TDX environments with remote...

UBUNTU-CVE-2026-31470

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quote are copied out to guest userspace. In TDX environments with remote...

Linux Distros Unpatched Vulnerability : CVE-2026-31470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled value quotebuf-outlen that determines how many bytes of the quot...

CVE-2024-31470

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19334...

CVE-2025-31470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FancyThemes Page Takeover page-takeover allows Stored XSS.This issue affects Page Takeover: from n/a through = 1.1.6...

CVE-2025-31470

creationtimestamp| type| source ---|---|--- 2025-03-28 16:04:46+00:00| seen| https://t.me/cvedetector/21422...

CVE-2025-31470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FancyThemes Page Takeover page-takeover allows Stored XSS.This issue affects Page Takeover: from n/a through = 1.1.6...

CVE-2025-31470 WordPress Page Takeover plugin <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FancyThemes Page Takeover page-takeover allows Stored XSS.This issue affects Page Takeover: from n/a through = 1.1.6...

CVE-2025-31470

CVE-2025-31470 describes a Stored XSS in the WordPress plugin Page Takeover (affected: Page Takeover

CVE-2025-31470 WordPress Page Takeover plugin <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FancyThemes Page Takeover page-takeover allows Stored XSS.This issue affects Page Takeover: from n/a through = 1.1.6...

Axigen 10.5.0–4370c946 Cross Site Scripting

Exploit Title: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1; xhr2.open'PATCH', /api/v1/conversations/MQ/?h=$hcookie...

CVE-2023-31470

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the dnsencodedomain function in the dns.c file, via a crafted DNS request...

CVE-2023-31470

Summary: CVE-2023-31470 affects SmartDNS up to and including v41 before the fix commit 56d0332. The issue is a stack-based buffer overflow in the _dns_encode_domain function in dns.c, triggered by a crafted DNS request, leading to an out-of-bounds write. The CVSS v3.1 score is 9.8 (CRITICAL) with...

CVE-2023-31470

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the dnsencodedomain function in the dns.c file, via a crafted DNS request...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

CVE-2022-31470

Summary of CVE-2022-31470 : The issue is an XSS vulnerability in Axigen Mobile WebMail (and Axigen WebMail entries in related docs) that allows an attacker with an active user session to execute arbitrary JavaScript and access mailbox content. Concrete details across connected sources indicate tw...