CVE-2021-33965

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/setZRMesh which receives parameters by POST request, and the parameter meshenable and meshdevice have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

CVE-2024-33965

creationtimestamp| type| source ---|---|--- 2024-08-06 15:00:46+00:00| seen| https://t.me/cvedetector/2564...

CVE-2023-33965

creationtimestamp| type| source ---|---|--- 2023-06-01 18:25:19+00:00| seen| https://t.me/cibsecurity/64855 2025-01-09 17:18:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/984...

CVE-2023-33965

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965

Brook's tproxy server component is vulnerable to a drive-by command injection, enabling remote code execution when a user visits a malicious page that triggers requests to the local tproxy service. A fix is available in version 20230606. The affected product is the Brook cross‑platform network to...

CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2023-33965 Brook's tproxy server is vulnerable to a drive-by command injection.

Brook is a cross-platform programmable network tool. The tproxy server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local tproxy service leading to remote code execution. A patch is available in...

CVE-2022-33965

creationtimestamp| type| source ---|---|--- 2022-07-25 18:33:07+00:00| seen| https://t.me/cibsecurity/46907...

CVE-2022-33965

Multiple Unauthenticated SQL Injection SQLi vulnerabilities in Osamaesh WP Visitor Statistics plugin = 5.7 at WordPress...

CVE-2022-33965 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

Multiple Unauthenticated SQL Injection SQLi vulnerabilities in Osamaesh WP Visitor Statistics plugin = 5.7 at WordPress...

CVE-2022-33965

The CVE-2022-33965 entry corresponds to unauthenticated SQL injection vulnerabilities in the WordPress WP Visitor Statistics plugin (versions up to 5.7). The connected Nuclei template confirms multiple unauthenticated SQLi vectors in WordPress Visitor Statistics (

CVE-2021-33965

creationtimestamp| type| source ---|---|--- 2022-01-18 16:24:03+00:00| seen| https://t.me/cibsecurity/35690...

CVE-2021-33965

CVE-2021-33965 affects China Mobile An Lianbao WF-1 V1.0.1 router. The web interface at /api/ZRMesh/set_ZRMesh processes POST parameters mesh_enable and mesh_device and can be abused to perform command injection, enabling remote command execution. This is described across multiple feeds (NVD/Red ...

Genesis has an XSS vulnerability (CNVD-2020-33965)

Genesis is based on Spring + Spring MVC + Mybatis to build the developer community , forum system . Genesis has an XSS vulnerability that can be exploited by an attacker to obtain sensitive information such as user cookies...