Moodle-CVE-2019-3810

Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1.16 XSS PoC для повышения привилегий от студента до администратора. Это одна из прошлых ошибок, которую я обнаружил во время прошлого пентеста в академическом учреждении. На тот момент она была достаточно успешной, чтобы практически украсть прав...

cve-2018-3810

CVE-2018-3810 Это часть Cved: инструмент для управления уязвимыми Docker-контейнерами. Cved: https://github.com/git-rep-src/cved Источник образа: https://github.com/cved-sources/cve-2018-3810 Автор образа: https://github.com/cved-sources/cve-2018-3810...

CVE-2018-3810_exploit

이 저장소에는 README가 없습니다...

CVE-2018-3810

이 저장소에는 README가 없습니다...

Amazon Linux 2 : python, --advisory ALAS2-2026-3810 (ALAS-2026-3810)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3810 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making...

CVE-2026-3810

creationtimestamp| type| source ---|---|--- 2026-03-09 07:16:01+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3810...

MiracleLinux 7 : flatpak-1.0.2-4.el7 (AXSA:2019-3810:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3810:01 advisory. Security Fix - Flatpakapplyextra /proc CVE-2019-8308 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the...

CVE-2025-20712

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID:...

PT-2025-41868

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw that allows for a potential out-of-bounds write due to an incorrect bounds check. This issue could lead to remote proximal/adjacent escalation of...

Linux Distros Unpatched Vulnerability : CVE-2022-3810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4File::AP4File of the file Mp42Hevc.cpp of the...

Linux Distros Unpatched Vulnerability : CVE-2010-3810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object,...

CVE-2023-3810

A vulnerability was found in Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file patientappointment.php. The manipulation of the argument loginid/password/mobileno/appointmentdate/appointmenttime/patiente/dob/doct/city leads to sql...

CVE-2022-3810

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4File::AP4File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been...

CVE-2013-7308

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

CVE-2011-3810

TinyWebGallery TWG 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by iframes/iregister.php...

CVE-2025-3810

The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the editprofiledata functio...

CVE-2025-3810

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15657 2025-05-09 04:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopmeep5sp2o 2025-05-09 05:01:06+00:00| seen|...

CVE-2025-3810

CVE-2025-3810 (WPBookit, WordPress) is an unauthenticated privilege-escalation vulnerability caused by improper validation in the edit_profile_data() path, enabling attackers to modify any user’s email or password (including admins) and take over accounts. Connected sources confirm the issue affe...

CVE-2025-3810 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the editprofiledata functio...

CVE-2025-3810 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the editprofiledata functio...