15 matches found
EUVD-2022-36720
Malicious code in bioql PyPI...
MAL-2025-36720 Malicious code in testdtb (npm)
The package testdtb was found to contain malicious code...
CVE-2023-36720
creationtimestamp| type| source ---|---|--- 2023-10-10 22:22:51+00:00| seen| https://t.me/cibsecurity/72009 2024-01-03 18:07:00+00:00| seen| https://t.me/arpsyndicate/2336...
CVE-2023-36720
Windows Mixed Reality Developer Tools Denial of Service Vulnerability...
CVE-2023-36720
Windows Mixed Reality Developer Tools Denial of Service Vulnerability...
CVE-2023-36720 Windows Mixed Reality Developer Tools Denial of Service Vulnerability
...
CVE-2023-36720
CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...
CVE-2020-36720
The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...
CVE-2020-36720 Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...
CVE-2020-36720 Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...
CVE-2020-36720
The CVE concerns the Kali Forms plugin for WordPress, affected up to version 2.1.1. Root cause: the update_option function lacks proper authentication checks, allowing any authenticated attacker to change or delete plugin settings. Impact is authenticated options changes, which can affect configu...
CVE-2022-36720
CVE-2022-36720 affects Library Management System v1.0, with a SQL injection vulnerability in the id parameter of /admin/modify1.php. The CVSS v3.1 vector indicates a network-attackable, low-privileges, no user interaction, with high impact on confidentiality, integrity, and availability (8.8 base...
CVE-2021-36720
creationtimestamp| type| source ---|---|--- 2021-12-08 22:23:04+00:00| seen| https://t.me/cibsecurity/33642...
CVE-2021-36720
PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...
CVE-2021-36720
PineApp - Mail Secure contains a cross-site scripting (XSS) vulnerability in the /blocking.php?url= parameter that allows injection of arbitrary script code (e.g., ). This can lead to cookie theft and related session information exposure as described in multiple sources. The vulnerability is tied...