28 matches found
Kan <= 0.5.4 - Server-Side Request Forgery
Kan, an open-source project management tool Trello alternative, versions 0.5.4 and below are vulnerable to an unauthenticated Server-Side Request Forgery in the /api/download/attatchment endpoint. The endpoint passes the attacker-controlled url query parameter straight to a server-side fetch...
poc-cve-2026-32255
Kan SSRF via Attachment Download CVE-2026-32255 - Proof of Concept This repository contains a proof of concept POC for CVE-2026-32255 , a high-severity Server-Side Request Forgery SSRF vulnerability in Kan , an open-source project management tool. The vulnerable endpoint allows unauthenticated...
ROOT-OS-DEBIAN-11-CVE-2023-32255 CVE-2023-32255 in linux - Patched by Root
Root has patched CVE-2023-32255 in the linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2023-32255
creationtimestamp| type| source ---|---|--- 2026-06-30 00:27:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphqm7ijcw23...
EUVD-2023-32255
Malicious code in bioql PyPI...
BELL-CVE-2023-32255 CVE-2023-32255 does not affect BellSoft software
Bulletin has no description...
CVE-2023-32255
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...
CVE-2023-32255
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...
UBUNTU-CVE-2023-32255
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...
CVE-2023-32255 Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...
CVE-2023-32255
CVE-2023-32255 affects the Linux kernel ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion. The provided connected documents (NVD, OSV entries, and vendor advisories) confirm this beha...
CVE-2022-32255
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited information...
CVE-2025-32255
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList stafflist allows Retrieve Embedded Sensitive Data.This issue affects StaffList: from n/a through = 3.2.7...
CVE-2025-32255
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList stafflist allows Retrieve Embedded Sensitive Data.This issue affects StaffList: from n/a through = 3.2.7...
CVE-2025-32255 WordPress StaffList plugin <= 3.2.6 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList allows Retrieve Embedded Sensitive Data. This issue affects StaffList: from n/a through 3.2.6...
CVE-2025-32255 WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList stafflist allows Retrieve Embedded Sensitive Data.This issue affects StaffList: from n/a through = 3.2.7...
CVE-2025-32255
CVE-2025-32255 pertains to the StaffList WordPress plugin, with unauthenticated exposure of sensitive information in versions up to 3.2.6. The connected documents also reference EUVD-2025-9792 and Wordfence reporting, noting the issue as unauthenticated sensitive information exposure but without ...
WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Anhchangmutrang in WordPress Plugin StaffList versions = 3.2.7...
CVE-2023-4671
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection.This issue affects ECOP: before 32255...