33 matches found
ROOT-OS-DEBIAN-11-CVE-2026-31777 CVE-2026-31777 in rootio-linux - Patched by Root
Root has patched CVE-2026-31777 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-31777 CVE-2026-31777 in rootio-linux - Patched by Root
Root has patched CVE-2026-31777 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-31777 CVE-2026-31777 in rootio-linux - Patched by Root
Root has patched CVE-2026-31777 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2026-31777 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-vmware...
BELL-CVE-2026-31777
Bulletin has no description...
DEBIAN-CVE-2026-31777
In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper value returned from daiodeviceindex, but it's not always true. Add a proper error check to deal with the error from the function...
CVE-2025-31777
creationtimestamp| type| source ---|---|--- 2025-04-02 15:33:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10105...
WordPress Clockinator Lite plugin <= 1.0.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Clockinator Lite versions = 1.0.8...
CVE-2025-31777 WordPress Clockinator Lite plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in BeastThemes Clockinator Lite clockify-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clockinator Lite: from n/a through = 1.0.9...
CVE-2025-31777 WordPress Clockinator Lite plugin <= 1.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in BeastThemes Clockinator Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clockinator Lite: from n/a through 1.0.7...
CVE-2024-31777
File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint...
CVE-2024-31777
creationtimestamp| type| source ---|---|--- 2024-04-12 08:37:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7027 2024-04-17 15:52:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7028...
GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload
Exploit Title: GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload Date: 2024-02-04 Exploit Author: Georgios Tsimpidas Vendor Homepage: https://www.openeclass.org/ Software Link: https://download.openeclass.org/files/3.15/ Version: 3.15 2024 Tested on: Debian Kali...
Exploit for Unrestricted Upload of File with Dangerous Type in Openeclass
CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestri...
Exploit for Unrestricted Upload of File with Dangerous Type in Openeclass
CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestri...
GUnet OpenEclass E-learning 3.15 File Upload / Command Execution Exploit
GUnet OpenEclass E-learning platform version 3.15 suffers from an unrestricted file upload vulnerability in certbadge.php that allows for remote command execution. import requests import argparse import zipfile import os import sys RED = '\03391m' GREEN = '\03392m' YELLOW = '\03393m' RESET =...
Apache Spark < 3.2.2 / 3.3.0 < 3.3.1 XSS (CVE-2022-31777)
The version of Apache Spark installed on the remote host is prior to 3.2.2 or is 3.3.0. It is, therefore, affected by a cross-site scripting XSS vulnerability. An authenticated, remote attacker can execute arbitrary JavaScript in the web browser of a user by including a malicious payload into the...
CVE-2022-31777
A stored cross-site scripting XSS flaw was found in Apache Spark. This issue allows an attacker to execute arbitrary JavaScript in the web browser of a user, including a malicious payload into the logs which are returned in logs rendered in the UI...
CVE-2022-31777
creationtimestamp| type| source ---|---|--- 2022-11-01 19:13:50+00:00| seen| https://t.me/cibsecurity/52390 2023-11-11 17:45:13+00:00| seen| https://t.me/arpsyndicate/88 2025-05-06 04:20:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15046...
com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0 <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0 <=1.0.6) +23 more potentially affected by CVE-2022-31777 via org.apache.spark:spark-core_2.10 (>=0.9.0-incubating <=0.9.2)
org.apache.spark:spark-core2.10 MAVEN version =0.9.0-incubating, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.2, =0.2.2, =0.9.0-C2-EA, =0.5.0, =0.9.0, =0.8.3, =0.9.0-incubating, =0.9.0-incubating, =0.9.2 and more Source cves: CVE-2022-31777 Source advisory: OSV:GHSA-43XG-8WMJ-CW8H...