33 matches found
CVE-2022-38577
creationtimestamp| type| source ---|---|--- 2022-09-22 11:05:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6850 2023-05-25 16:56:29+00:00| published-proof-of-concept| https://t.me/dilagrafie/2812 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2566 2026-07-30...
Exploit for Improper Preservation of Permissions in Processmaker
This repository has be archived and moved to: https://github.com...
ProcessMaker Privilege Escalation Exploit
Exploit Title: ProcessMaker - User Profile Privilege Escalation Description: ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators. Exploit Author: Sornram Kampeera...
ProcessMaker Privilege Escalation
Exploit Title: ProcessMaker - User Profile Privilege Escalation Description: ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators. Date: 20220822 Exploit Author: Sornram...
CVE-2022-38577
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators...
CVE-2022-38577
ProcessMaker before v3.5.4 has an insecure permission issue on the user profile page that lets normal users escalate to Administrators. This is documented across multiple sources (NVD/Red Hat/OSV) and is the same CVE entry, CVE-2022-38577. The Red Hat data additionally notes a related unrestricte...
CVE-2021-38577
creationtimestamp| type| source ---|---|--- 2022-03-04 00:26:29+00:00| seen| https://t.me/cibsecurity/38390...
UBUNTU-CVE-2021-38577
REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2021-38577
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...
Unfixed XSS vulnerability at c2.com
Security researcher Sony, has submitted on 09/02/2012 a cross-site-scripting XSS vulnerability affecting c2.com, which at the time of submission ranked 38577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/08/2012. It is currently unfixed. I...
CVE-2021-38577
Heap Overflow in BaseBmpSupportLib...
CVE-2021-38577
CVE-2021-38577 is linked in several sources to a heap overflow in BaseBmpSupportLib within Tianocore Edk2. The available connected documents confirm a BaseBmpSupportLib heap overflow as the underlying issue, but there are no public details in these documents about affected versions, exploitabilit...
