MAL-2025-36265 Malicious code in test-mlw2-snags-fomes-brief-polks (npm)

The package test-mlw2-snags-fomes-brief-polks was found to contain malicious code...

CVE-2024-36265

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...

CVE-2024-36265 Apache Submarine Server Core: authorization bypass

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST requests. As this project is retired, we do not plan to release a...

CVE-2024-36265 Apache Submarine Server Core: authorization bypass

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST requests. As this project is retired, we do not plan to release a...

CVE-2022-36265

creationtimestamp| type| source ---|---|--- 2024-03-11 07:14:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10122...

CVE-2020-36265

...

CVE-2020-36265

CVE-2020-36265 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2022-36265

CVE-2022-36265 affects Airspan AirSpot 5410 (versions 0.3.4.1-4 and earlier). A hidden, undocumented system command web page in firmware lets an authenticated user execute Linux commands with root privileges, enabling full device compromise. Exploitation details are described across multiple sour...