15 matches found
CVE-2026-50741
Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method...
EUVD-2026-39602
Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method...
PT-2026-52649
Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method...
Revive Adserver: PHP code injection in delivery-limitation `logical` validation bypass
A vulnerability in the delivery-limitation logical validation was reported. The vulnerability allowed bypassing the fix for CVE-2026-34916 by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method...
MAL-2025-34916 Malicious code in test-mlw2-axles-zowie (npm)
The package test-mlw2-axles-zowie was found to contain malicious code...
CVE-2023-34916
Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java...
CVE-2021-34916
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2023-34916
creationtimestamp| type| source ---|---|--- 2023-07-31 20:37:48+00:00| seen| https://t.me/cibsecurity/67478...
CVE-2023-34916
CVE-2023-34916 corresponds to an Open Redirect vulnerability in Fuge CMS v1.0 via the path /front/ProcessAct.java . The connected sources consistently describe an open redirect issue without detailing affected subcomponents beyond that endpoint. The root cause is not elaborated beyond the redirec...
CVE-2022-34916 Improper Input Validation (JNDI Injection) in JMSMessageConsumer
Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution RCE attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java...
CVE-2022-34916
CVE-2022-34916 affects Apache Flume versions 1.4.0–1.10.0, where a JMS Source using a JNDI LDAP data source URI can enable remote code execution if an attacker controls the target LDAP server. The vulnerability stems from how JMSMessageConsumer handles JNDI lookups, allowing code execution throug...
CVE-2021-34916
creationtimestamp| type| source ---|---|--- 2022-01-14 00:24:14+00:00| seen| https://t.me/cibsecurity/35472...
CVE-2021-34916
Summary of CVE-2021-34916 (Bentley View) : The vulnerability affects Bentley View 10.15.0.75 and arises from improper validation during DWG file parsing, causing an out-of-bounds read (read past end of allocated buffer). An attacker can exploit this via a visited malicious page or opened file, wi...