21 matches found
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:24761)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:24761 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
Exploit for Missing Authentication for Critical Function in Vitejs Vite
CVE-2026...
CVE-2026-39363 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, langfuse, vite, vitess, langfuse-fips...
CVE-2026-39363 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, vite...
Exploit for CVE-2026-39363
CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read...
CVE-2026-39363
creationtimestamp| type| source ---|---|--- 2026-04-06 12:11:59+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583 2026-04-07 21:22:19+00:00| seen| Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU 2026-04-07 22:49:01+00:00| seen|...
MAL-2025-39363 Malicious code in witems (npm)
The package witems was found to contain malicious code...
CVE-2021-39363
Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...
CVE-2025-39363
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363
CVE-2025-39363 affects the WordPress plugin Custom Login and Registration (versions
WordPress Custom Login and Registration plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Custom Login and Registration versions = 1.0.0...
CVE-2024-39363
creationtimestamp| type| source ---|---|--- 2025-01-14 15:11:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1495 2025-01-14 15:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkapuyx52j...
Wavlink AC3000 login.cgi set_lang_CountryCode() Persistent XSS vulnerability
Talos Vulnerability Report TALOS-2024-2017 Wavlink AC3000 login.cgi setlangCountryCode Persistent XSS vulnerability January 14, 2025 CVE Number CVE-2024-39363 SUMMARY A cross-site scripting xss vulnerability exists in the login.cgi setlangCountryCode functionality of Wavlink AC3000...
CVE-2023-39363
creationtimestamp| type| source ---|---|--- 2023-08-07 22:18:31+00:00| seen| https://t.me/cibsecurity/67903...
CVE-2023-39363
Vyper CVE-2023-39363 vulnerability: in Vyper versions 0.2.15, 0.2.16, and 0.3.0, named re-entrancy locks are allocated per function, not per key, enabling cross-function re-entrancy when a contract uses @nonreentrant with a specific key and path-dependent state updates before storage (breaking ch...