16 matches found
EUVD-2025-42966
Malicious code in lina-kembang10-miaww npm...
MAL-2025-42966 Malicious code in @tt4b-vmok/standalone (npm)
The package @tt4b-vmok/standalone was found to contain malicious code...
CVE-2025-42966
creationtimestamp| type| source ---|---|--- 2025-07-08 01:16:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114814969134379111 2025-07-08 03:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgf2ahpom2t 2025-07-16 17:11:07+00:00| seen|...
CVE-2025-42966
SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability ...
CVE-2025-42966 Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service)
SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability ...
CVE-2025-42966 Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service)
SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability ...
CVE-2024-42966
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...
CVE-2022-42966
creationtimestamp| type| source ---|---|--- 2025-03-02 13:31:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6095...
CVE-2024-42966
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...
CVE-2022-42966
An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...
CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service
An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...
CVE-2022-42966
CVE-2022-42966 concerns the PyPI package cleo and an exponential ReDoS (Regular Expression Denial of Service) that can be triggered when an attacker provides arbitrary input to the method Table.set_rows . The connected documents corroborate that the vulnerability arises from the way input is proc...
CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service
An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...
CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service
An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...