CVE-2024-42364

creationtimestamp| type| source ---|---|--- 2024-08-23 18:48:33+00:00| seen| https://t.me/cvedetector/4013...

CVE-2024-42364

Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1 is vulnerable to DNS rebinding. Homepage is setup without certificate and authentication by default, leaving it to vulnerable to DNS rebinding. In this attack, an attacker will...

CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11

CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...

Ubuntu: Security Advisory (USN-6961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : BusyBox vulnerabilities (USN-6961-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6961-1 advisory. It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or...

CVE-2023-42364

creationtimestamp| type| source ---|---|--- 2023-12-17 12:41:51+00:00| seen| https://t.me/ctinow/155589 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06 2026-05-18 18:18:06+00:00| seen|...

CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

CVE-2023-42364

CVE-2023-42364 describes a use-after-free in BusyBox v1.36.1’s awk.c evaluate function that can cause a denial of service via a crafted awk pattern. The Astra Linux security bulletin reiterates the same BusyBox vulnerability. Public details specify the vulnerability and affected binary, but there...

CVE-2022-42364

CVE-2022-42364 (Adobe Experience Manager) is a reflected Cross-Site Scripting vulnerability affecting AEM 6.5.14 and earlier. The issue arises in how vulnerable pages process input, allowing a low-privilege attacker to lure a user to a crafted URL and execute malicious JavaScript in the victim’s ...

CVE-2022-42364

creationtimestamp| type| source ---|---|--- 2022-12-19 22:27:59+00:00| seen| https://t.me/cibsecurity/54922...

CVE-2022-42364

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2021-42364

creationtimestamp| type| source ---|---|--- 2021-11-29 22:33:44+00:00| seen| https://t.me/cibsecurity/33065...

CVE-2021-42364 Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the statspage function found in the /stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6...

CVE-2021-42364 Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the statspage function found in the /stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6...

CVE-2021-42364

The CVE-2021-42364 entry maps to the WordPress Stetic plugin vulnerability, where Cross-Site Request Forgery arises from missing nonce validation in the stats_page function of stetic.php. Affected versions are up to 1.0.6, enabling attackers to inject arbitrary web scripts (Stored XSS). Several c...