15 matches found
MAL-2025-40668 Malicious code in yurt-flare-hzzt (npm)
The package yurt-flare-hzzt was found to contain malicious code...
CVE-2025-40668
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...
CVE-2025-40668
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...
CVE-2025-40668
creationtimestamp| type| source ---|---|--- 2025-06-09 13:02:03+00:00| published-proof-of-concept| Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc 2025-06-09 15:10:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr6nyb4nsw25...
CVE-2025-40668
CVE-2025-40668 : Affected software is TC MAN’s GIM v11. The vulnerability is an incorrect authorization flaw that lets a low-privilege attacker change other users’ passwords by sending a POST to the endpoint "/PC/WebService.aspx/validateChangePasswordña" with parameters idUser, PasswordActual, Pa...
CVE-2025-40668 Incorrect Authorization vulnerability in TCMAN GIM
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...
CVE-2023-40668
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin = 2.16.0 versions...
CVE-2023-40668
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin = 2.16.0 versions...
CVE-2023-40668
The CVE-2023-40668 entry concerns the WordPress plugin Save as PDF by Pdfcrowd (versions
WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 2.16.0 Fixed in 2.16.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40668 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 01bc8c014613 Credits Mahesh...
CVE-2022-40668
CVE-2022-40668 is rejected and does not represent an active vulnerability entry.
CVE-2021-40668
creationtimestamp| type| source ---|---|--- 2022-06-09 16:33:21+00:00| seen| https://t.me/cibsecurity/44087...
CVE-2021-40668
The CVE-2021-40668 entry concerns the Android application HTTP File Server (Version 1.4.1) by slowscript. Multiple connected sources confirm a path traversal vulnerability that permits arbitrary directory listing, file read, and file write. The NVD entry lists impact including partial confidentia...