97 matches found
GHSA-QPXM-689R-3849
creationtimestamp| type| source ---|---|--- 2024-02-26 22:46:37+00:00| seen| https://t.me/ctinow/193812...
mooDating 1.2 - Reflected Cross-site scripting Vulnerability
Exploit Title: mooDating 1.2 - Reflected Cross-site scripting XSS Exploit Author: CraCkEr aka skalvin Vendor: mooSocial Vendor Homepage: https://moodatingscript.com/ Software Link: https://demo.moodatingscript.com/home Version: 1.2 Tested on: Windows 10 Pro Impact: Manipulate the content of the...
mooDating 1.2 Cross Site Scripting
Exploit Title: mooDating 1.2 - Reflected XSS Exploit Author: CraCkEr aka skalvin Date: 22/07/2023 Vendor: mooSocial Vendor Homepage: https://moodatingscript.com/ Software Link: https://demo.moodatingscript.com/home Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE:...
CVE-2023-3849
mooDating 1.2 contains a Cross-Site Scripting vulnerability in the URL Handlerās /find-a-match function. The flaw, triggered via URL parameters, allows remote injection of scripts (per nuclei/Exploit-DB entries) and can lead to user session token theft or access to personal data. Public PoC/explo...
CVE-2022-3849
creationtimestamp| type| source ---|---|--- 2022-11-28 16:28:10+00:00| seen| https://t.me/cibsecurity/53572 2025-04-28 18:10:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13713...
CVE-2022-3849
The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...
CVE-2022-3849 WP User Merger < 1.5.3 - Admin+ SQLi via user_id
The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...
CVE-2022-3849
The CVE-2022-3849 entry pertains to the WP User Merger WordPress plugin (versions before 1.5.3). The vulnerability is a SQL injection caused by improper sanitisation/escaping of a parameter before it is used in a SQL statement, exploitable by users with a role as low as admin. Affected item: WP U...
CVE-2022-3849 WP User Merger < 1.5.3 - Admin+ SQLi via user_id
The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...
Ubuntu: Security Advisory (USN-1093-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3849-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3849
creationtimestamp| type| source ---|---|--- 2022-04-23 00:28:25+00:00| seen| https://t.me/cibsecurity/41356...
CVE-2021-3849
An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...
CVE-2021-3849
CVE-2021-3849 affects Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware. The vulnerability is an authentication bypass in the web interfaces that could allow an unauthenticated attacker to execute commands on the SMM and FPC2; SMM2 is not affected. Public docu...
Mageia: Security Advisory (MGASA-2019-0133)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202101-24 : cfitsio: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202101-24 cfitsio: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cfitsio. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...
About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
CVE-2020-3849
CVE-2020-3849 corresponds to a memory corruption issue in Apple macOS CoreBluetooth that could lead to remote termination or arbitrary code execution. Appleās HT210919 notes this vulnerability under CoreBluetooth with a fix in macOS Catalina 10.15.3 (and related security updates). The available c...
Apple Mac OS X Security Update (HT210919 - 02)
Apple Mac OS X is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Buffer overflow
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by...