17 matches found
CVE-2026-32076 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
...
EUVD-2025-32076
Malicious code in bioql PyPI...
CVE-2025-32076
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...
CVE-2025-32076
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...
CVE-2025-32076
creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11453 2025-04-11 19:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrosg6fm2z 2025-04-11 20:38:14+00:00| seen| https://t.me/cvedetector/22769...
CVE-2025-32076
The CVE-2025-32076 entry describes an Improper Input Validation vulnerability in The Wikimedia Foundation MediaWiki Visual Data Extension, affecting versions 1.39 through 1.43. The underlying issue is improper input validation in the extension’s handling of user-provided data, which can be exploi...
CVE-2025-32076 Evil regex used to process user-provided data in VisualData
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...
Linux Distros Unpatched Vulnerability : CVE-2023-32076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior ...
CVE-2023-32076
creationtimestamp| type| source ---|---|--- 2023-05-10 22:19:31+00:00| seen| https://t.me/cibsecurity/63827...
ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1 <=1.4.0)
in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:PYSEC-2023-63...
CVE-2023-32076
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2023-32076
Summary of CVE-2023-32076 (in-toto) : The vulnerability affects in-toto up to version 1.4.0, where the framework reads configuration from XDG directories and includes the hidden file .in_totorc. If an attacker controls inputs to a supply chain step, they can inject a crafted .in_totorc with exclu...
CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2021-32076
creationtimestamp| type| source ---|---|--- 2021-08-26 16:40:28+00:00| seen| https://t.me/D4RKW0R1D/6958 2021-08-26 18:26:52+00:00| seen| https://t.me/cibsecurity/27903 2021-08-26 18:40:25+00:00| seen| https://t.me/D4RKW0R1D/874...
CVE-2021-32076 Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass
Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...
CVE-2021-32076
SolarWinds Web Help Desk 12.7.2 is affected by an Access Restriction Bypass via referrer spoof. An attacker can reach the Web Help Desk Getting Started Wizard, including the admin account creation page, by intercepting an HTTP request and changing the referrer from the public IP to the loopback, ...