CVE-2024-36401

creationtimestamp| type| source ---|---|--- 2024-07-03 15:43:33+00:00| published-proof-of-concept| https://t.me/HackingInsights/4617 2024-07-04 13:46:58+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7863 2024-07-04 16:31:10+00:00| published-proof-of-concept|...

VulnCheck KEV: CVE-2024-36401

OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input...

CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer...

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability...

CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution Vulnerability

...

CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution Vulnerability

...

CVE-2023-36401

Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

CVE-2021-36401

Moodle is affected by CVE-2021-36401 due to insufficient sanitization when exporting ID numbers in HTML data formats, enabling local stored XSS. Concrete details from connected sources indicate affected Moodle version ranges (e.g., older branches such as < 3.9.8 and

Moodle 3.10.x < 3.10.5 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.8, 3.10.x prior to 3.10.5 or 3.11.x prior to 3.11.1. It is, therefore, affected by multiple vulnerabilities: - An SQL injection in the library fetching a user's enrolled courses. CVE-2021-36392 - An SQL injection in the...

CVE-2022-36401

creationtimestamp| type| source ---|---|--- 2023-02-03 00:15:04+00:00| seen| https://t.me/cibsecurity/57413...

CVE-2022-36401

Cross-Site Request Forgery CSRF vulnerability in TeraWallet – For WooCommerce plugin = 1.3.24 versions...

CVE-2022-36401 WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TeraWallet – For WooCommerce plugin = 1.3.24 versions...

CVE-2022-36401

The CVE-2022-36401 entry concerns a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin TeraWallet – For WooCommerce, affecting versions =1.4.0. Public references across CVE/NVD and vendor advisories corroborate the CSRF nature and affected version range. No exploitation detai...

CVE-2022-36401 WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TeraWallet – For WooCommerce plugin = 1.3.24 versions...

DEBIAN-CVE-2020-36401

mruby 2.1.2 has a double free in mrbdefaultallocf called from mrbfree and objfree...

CVE-2020-36401

The affected component is mruby 2.1.2, which contains a vulnerability described as a double free in mrb_default_allocf (called from mrb_free and obj_free). This is the root cause stated across multiple sources. The CVE-2020-36401 entry documents the issue without giving vendor patches or fixed ve...