CVE-2023-31546

Consolidated details show: Affected product is DedeBIZ v6.0.3. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the search feature , allowing an attacker to run arbitrary code in the context of a user session. Root cause identified as improper handling of input in the search...

CVE-2023-31546

creationtimestamp| type| source ---|---|--- 2023-12-13 15:20:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9579 2023-12-18 23:17:47+00:00| seen| https://t.me/ctinow/156180 2024-01-10 16:41:54+00:00| seen| https://t.me/ctinow/165936 2024-08-16 08:56:12+00:00|...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546

Affected software: nlpweb/glance repository (GitHub) up to 2014-06-27. Vulnerability: absolute path traversal due to unsafe usage of Flask send_file. Impact: potential exposure of sensitive server files; practical consequences stated as absolute path traversal. Evidence: CVE-2022-31546 entries fr...

D-Link DIR-619 Stack Overflow Vulnerability (CNVD-2022-31546)

D-Link DIR-619 is a series of routers from D-Link, a Chinese company. D-Link DIR-619 Ax v1.00 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the config.savenetworkenabled parameter...

MediaWiki <= 1.36.0 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

MediaWiki < 1.36.0 Multiple Vulnerabilities - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

CVE-2021-31546

creationtimestamp| type| source ---|---|--- 2021-04-22 10:39:57+00:00| seen| https://t.me/reconshell/676 2021-04-23 09:28:33+00:00| seen| https://t.me/HackerOne/2990...

CVE-2021-31546

CVE-2021-31546 affects MediaWiki’s AbuseFilter extension and concerns the incorrect logging of sensitive suppression deletions, which were accessible to users who could view AbuseFilter log data. The issue is associated with MediaWiki versions up to 1.35.2 (AbuseFilter). The connected documents c...