13 matches found
CVE-2025-36074
IBM Security Verify Directory Container 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against...
MAL-2025-36074 Malicious code in test-mlw2-quits-unlit (npm)
The package test-mlw2-quits-unlit was found to contain malicious code...
CVE-2020-36074
creationtimestamp| type| source ---|---|--- 2023-04-06 18:27:06+00:00| seen| https://t.me/cibsecurity/61557 2023-12-17 21:48:58+00:00| seen| https://t.me/arpsyndicate/1848 2025-02-14 10:05:08+00:00| seen| Telegram/pkQ-aKVg9y1VajScOQjsHR3geKe58M8MpuAEG5kiarTedjHo...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
CVE-2020-36074
CVE-2020-36074 is a SQL injection vulnerability in Tailor Mangement System v.1, where a remote attacker can cause arbitrary code execution through the title parameter. The issue stems from improper input handling in a query path involving the title field. Multiple connected sources corroborate th...
CVE-2020-36074
SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter...
CVE-2022-36074
creationtimestamp| type| source ---|---|--- 2022-09-16 02:27:57+00:00| seen| https://t.me/cibsecurity/49857...
CVE-2022-36074 Authentication headers exposed on by Nextcloud Server
Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server...
CVE-2022-36074
The CVE-2022-36074 entry concerns Nextcloud Server where information disclosure occurs because the server fails to strip the Authorization header during HTTP downgrades. Affected products/versions include Nextcloud Server prior to 23.0.7 and 24.0.3 (enterprise versions 22.2.11, 23.0.7, or 24.0.3)...
CVE-2021-36074
creationtimestamp| type| source ---|---|--- 2021-09-01 18:41:11+00:00| seen| https://t.me/cibsecurity/28183...
CVE-2021-36074
Adobe Bridge 11.x before 11.1.1 is affected by an out-of-bounds read that can disclose arbitrary memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented as CVE-2021-36074 and is addressed by Adobe APSB21-69; remediation i...
Adobe Bridge 11.x < 11.1.1 Multiple Vulnerabilities (APSB21-69)
The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-69 advisory. - Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of...