26 matches found
Silverpeas-AuthBypass-CVE-2024-36042
Silverpeas-AuthBypass-CVE-2024-36042 Una prueba de concepto limpia y de nivel profesional en Python3 para CVE-2024-36042 — un bypass de autenticación en Silverpeas 6.3.5 causado por la falta de validación de contraseña en AuthenticationServlet. Resumen Silverpeas AuthenticationServlet acepta una...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Silverpeas
Silverpeas-AuthBypass-CVE-2024-36042 A clean, single-file P...
CVE-2025-36042
creationtimestamp| type| source ---|---|--- 2025-08-22 15:12:33+00:00| seen| Telegram/jKAlubd9Fs6CnQNKFn0jHldsfbxBpedudcX3110vUgikmo0...
CVE-2025-36042
IBM QRadar SIEM versions 7.5 through 7.5.0 Dashboard are vulnerable to cross-site scripting (CVE-2025-36042). An authenticated user can embed arbitrary JavaScript in the Web UI, potentially altering functionality and disclosing credentials within a trusted session. The issue is tied to the Dashbo...
Security Bulletin: IBM QRadar SIEM is affected by local privilege escalation and cross-site scripting (CVE-2025-33120, CVE-2025-36042)
Summary IBM QRadar SIEM is affected by local privilege escalation and cross-site scripting, which could enable authenticated users to obtain elevated privileges and compromise the web UI potentially impacting session confidentiality. Vulnerability Details CVEID:CVE-2025-33120 DESCRIPTION: IBM...
CVE-2024-36042
creationtimestamp| type| source ---|---|--- 2025-01-19 17:02:13+00:00| seen| https://bsky.app/profile/decrypt.lol/post/3lg4chhx2kl2n 2025-03-12 03:30:38+00:00| seen| https://gist.github.com/wulfgarpro/a625586ce55cc602e21ed69b6e29e4d4 2025-08-20 09:00:04+00:00| published-proof-of-concept|...
CVE-2024-36042
Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access...
CVE-2024-36042
CVE-2024-36042 affects Silverpeas prior to 6.3.5. The issue allows authentication bypass by omitting the Password field to AuthenticationServlet, often granting an unauthenticated user superadmin access. Root cause: missing Password field handling leads to bypass of authentication checks (as desc...
CVE-2024-36042
Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access...
CVE-2024-36042
Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access...
January 9, 2024-KB5033920 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2
None None...
January 9, 2024-KB5033917 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2
None None...
January 9, 2024-KB5034274 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
Security Updates for Microsoft Visual Studio Products (November 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of...
CVE-2023-36042
Visual Studio Denial of Service Vulnerability...
CVE-2023-36042
Visual Studio Denial of Service Vulnerability...
CVE-2023-36042 Visual Studio Denial of Service Vulnerability
...
CVE-2023-36042 Visual Studio Denial of Service Vulnerability
...
CVE-2023-36042
CVE-2023-36042 is a Microsoft .NET Framework-related Denial of Service vulnerability. Connected sources show that multiple monthly security updates (KB5034276/KB5034274/KB5034275/KB5033920–KB5033910 family) address this issue across Windows 10/11, Azure Stack HCI, and server variants by applying ...