12 matches found
CVE-2026-33136
creationtimestamp| type| source ---|---|--- 2026-03-20 13:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimnjfqen2v 2026-03-20 20:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjdop7oek23 2026-03-20 21:27:14+00:00| seen|...
CVE-2025-33136
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data...
CVE-2025-33136
creationtimestamp| type| source ---|---|--- 2025-05-22 16:43:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17306...
CVE-2025-33136
CVE-2025-33136 affects IBM Aspera Faspex 5 (versions 5.0.0–5.0.12). The issue is due to improper protection of assumed immutable data (MAID), enabling an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user. According to IBM’s advisory, reme...
CVE-2025-33136 IBM Aspera Faspex data modification
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data...
Security Bulletin: IBM Aspera Faspex is affected by user input sanitization and HTML injection vulnerabilities
Summary IBM Aspera Faspex has addressed input sanitization and HTML injection vulnerabilities CVE-2025-33137, CVE-2025-33136, CVE-2025-33138 Vulnerability Details CVEID:CVE-2025-33137 DESCRIPTION: IBM Aspera Faspex 5 could allow an authenticated user to obtain sensitive information or perform...
CVE-2021-33136
creationtimestamp| type| source ---|---|--- 2024-02-23 22:27:12+00:00| seen| https://t.me/ctinow/192230...
CVE-2023-33136 Azure DevOps Server Remote Code Execution Vulnerability
...
CVE-2023-33136
CVE-2023-33136 is an Azure DevOps Server remote code execution vulnerability with a base CVSS v3.1 score of 8.8 (HIGH). Multiple connected sources describe RCE via insufficient input validation and list affected Azure DevOps Server versions, including 2019.0.1, 2019.1.2, 2020.0.2, 2020.1.2, and 2...
CVE-2023-33136 Azure DevOps Server Remote Code Execution Vulnerability
...
SQL Injection Vulnerability in Ocean CMS Backend (CNVD-2020-33136)
Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. There is a SQL injection vulnerability in the backend of Ocean CMS, which can be exploited by attackers to obtain sensitive database information...