Lucene search
K

20 matches found

Circl
Circl
added 2026/05/29 7:0 p.m.9 views

CVE-2026-47125

creationtimestamp| type| source ---|---|--- 2026-05-29 19:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7v62jq52a 2026-05-29 20:16:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmze567paf2r...

8.8CVSS5.7AI score0.00245EPSS
Exploits0References2
NVD
NVD
added 2026/05/29 6:17 p.m.13 views

CVE-2026-47125

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...

8.8CVSS0.00245EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/01/23 11:13 a.m.211 views

Exploit for Cross-site Scripting in Typo3 Html_Sanitizer

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-...

6.1CVSS5AI score0.00574EPSS
Exploits1
EUVD
EUVD
added 2025/11/10 5:21 p.m.3 views

EUVD-2025-47125

Malicious code in innocenthedgehogz3n npm...

6.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 8:34 a.m.6 views

CVE-2024-47125

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...

8.1CVSS7AI score0.0014EPSS
Exploits0
Circl
Circl
added 2024/09/26 9:21 p.m.2 views

CVE-2024-47125

creationtimestamp| type| source ---|---|--- 2024-09-26 21:21:08+00:00| seen| https://t.me/cvedetector/6443...

8.1CVSS4.8AI score0.0014EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/26 5:24 p.m.18 views

CVE-2024-47125 Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...

8.1CVSS0.0014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/26 5:24 p.m.14 views

CVE-2024-47125 Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...

8.1CVSS6.7AI score0.0014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/03/16 6:7 p.m.18 views

CVE-2021-47125

A vulnerability was found in the Linux kernel. The schhtb component caused reference count leaks due to inconsistent handling of NULL pointers, leading to mismatched queue pointers. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to...

5.5CVSS6.2AI score0.00193EPSS
Exploits0References4
Circl
Circl
added 2024/03/15 10:27 p.m.2 views

CVE-2021-47125

creationtimestamp| type| source ---|---|--- 2024-03-15 22:27:13+00:00| seen| https://t.me/ctinow/209213 2024-03-16 19:16:28+00:00| seen| https://t.me/ctinow/209663...

5.5CVSS6AI score0.00193EPSS
Exploits0References2
OSV
OSV
added 2024/03/15 9:15 p.m.0 views

UBUNTU-CVE-2021-47125

In the Linux kernel, the following vulnerability has been resolved: schhtb: fix refcount leak in htbparenttoleafoffload The commit ae81feb7338c "schhtb: fix null pointer dereference on a null newq" fixes a NULL pointer dereference bug, but it is not correct. Because htbgrafthelper properly handle...

5.5CVSS5.8AI score0.00193EPSS
Exploits0References5
CVE
CVE
added 2024/03/15 8:14 p.m.65 views

CVE-2021-47125

CVE-2021-47125 concerns a Linux kernel local vulnerability due to a refcount leak in the HTB offload path. The root cause was an incorrect NULL handling around qdisc_refcount_inc in htb_parent_to_leaf_offload, which could leak references if new_q was NULL. The fix adds a NULL pointer check to gua...

5.5CVSS6.6AI score0.00193EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/11/14 8:7 p.m.90 views

CVE-2023-47125

CVE-2023-47125 affects TYPO3’s html-sanitizer: DOM processing instructions are not handled correctly, allowing bypass of the built-in XSS protection. Affected TYPO3/core-html-sanitizer versions are mitigated by upgrading to 1.5.3 or 2.1.4, which fix the issue. The vulnerability arises in the sani...

6.1CVSS5.1AI score0.00574EPSS
Exploits1References3Affected Software2
Cvelist
Cvelist
added 2023/11/14 8:7 p.m.21 views

CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

4.7CVSS6.2AI score0.00574EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/11/14 12:0 a.m.28 views

TYPO3 8.7.42 < 8.7.55 ELTS / 9.5.29 < 9.5.44 ELTS / 10.4.19 < 10.4.41 ELTS / 11.3.2 < 11.5.33 / 12.0.0 < 12.4.8 XSS (TYPO3-CORE-SA-2023-007)

The version of TYPO3 installed on the remote host is prior to 8.7.42 8.7.55 ELTS / 9.5.29 9.5.44 ELTS / 10.4.19 10.4.41 ELTS / 11.3.2 11.5.33 / 12.0.0 12.4.8. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2023-007 advisory. - DOM processing instructions are not...

6.1CVSS6.3AI score0.00574EPSS
Exploits1References2
Circl
Circl
added 2022/12/31 12:20 a.m.5 views

CVE-2022-47125

creationtimestamp| type| source ---|---|--- 2022-12-31 00:20:36+00:00| seen| https://t.me/cibsecurity/55606...

9.8CVSS8.7AI score0.00873EPSS
Exploits1References1
OSV
OSV
added 2022/12/30 9:15 p.m.2 views

CVE-2022-47125

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...

9.8CVSS5.9AI score0.00873EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/12/30 12:0 a.m.23 views

CVE-2022-47125

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...

9.9AI score0.00873EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/12/30 12:0 a.m.6 views

CVE-2022-47125

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...

7.8AI score0.00873EPSS
Exploits1References1
CVE
CVE
added 2022/12/30 12:0 a.m.65 views

CVE-2022-47125

According to the provided documents, the Tenda A15 (v15.13.07.13) contains a stack overflow vulnerability in the wrlEn_5g parameter of the /goform/WifiBasicSet endpoint. The root cause is described as incorrect boundary checking for the wrlEn_5g input, enabling a remote attacker to trigger a stac...

9.8CVSS9.7AI score0.00873EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder