16 matches found
CVE-2021-35343
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:30+00:00| seen| https://t.me/hackingAttack/18681 2026-09-02 01:03:04+00:00| seen| https://t.me/hackingAttack/18681 2026-09-07 22:00:07+00:00| published-proof-of-concept| https://t.me/hackingAttack/18681 2026-09-08 00:00:23+00:00|...
DEBIAN-CVE-2026-35343
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
CVE-2026-35343 uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
CVE-2026-35343
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
CVE-2026-35343 uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
CVE-2021-35343
Cross-Site Request Forgery CSRF vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x5.1.23 and v6.0.x6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...
CVE-2024-35343
Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L,...
CVE-2024-35343
Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L,...
CVE-2024-35343
Anpviz IPC cameras are affected by CVE-2024-35343: unauthenticated remote attackers can download arbitrary files from the device filesystem via HTTP GET to /playback/. Affected models include IPC-D250/260/B850/D850/D350/D3150/D4250/D380/D880/280/3180, MC800N, YM500L/800N_N2/YMF50B/YM800SV2/YM500L...
CVE-2023-35343
Windows Geolocation Service Remote Code Execution Vulnerability...
CVE-2023-35343 Windows Geolocation Service Remote Code Execution Vulnerability
...
CVE-2023-35343 Windows Geolocation Service Remote Code Execution Vulnerability
...
CVE-2023-35343
CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...
CVE-2022-35343
CVE-2022-35343 is rejected/not used as stated; this entry does not represent an active vulnerability.
CVE-2021-35343
CVE-2021-35343 is a CSRF vulnerability in SeedDMS. Affected versions are SeedDMS v5.1.x before 5.1.23 and v6.0.x before 6.0.16, where the issue resides in the /op/op.Ajax.php endpoint. An authenticated user who visits a malicious page can have their session used to edit a document’s name without ...