20 matches found
CVE-2026-47125
creationtimestamp| type| source ---|---|--- 2026-05-29 19:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7v62jq52a 2026-05-29 20:16:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmze567paf2r...
CVE-2026-47125
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...
Exploit for Cross-site Scripting in Typo3 Html_Sanitizer
Stored XSS exploit in TYPO3 HTML Sanitizer CVE-...
EUVD-2025-47125
Malicious code in innocenthedgehogz3n npm...
CVE-2024-47125
The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...
CVE-2024-47125
creationtimestamp| type| source ---|---|--- 2024-09-26 21:21:08+00:00| seen| https://t.me/cvedetector/6443...
CVE-2024-47125 Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro
The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...
CVE-2024-47125 Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro
The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols...
CVE-2021-47125
A vulnerability was found in the Linux kernel. The schhtb component caused reference count leaks due to inconsistent handling of NULL pointers, leading to mismatched queue pointers. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to...
CVE-2021-47125
creationtimestamp| type| source ---|---|--- 2024-03-15 22:27:13+00:00| seen| https://t.me/ctinow/209213 2024-03-16 19:16:28+00:00| seen| https://t.me/ctinow/209663...
UBUNTU-CVE-2021-47125
In the Linux kernel, the following vulnerability has been resolved: schhtb: fix refcount leak in htbparenttoleafoffload The commit ae81feb7338c "schhtb: fix null pointer dereference on a null newq" fixes a NULL pointer dereference bug, but it is not correct. Because htbgrafthelper properly handle...
CVE-2021-47125
CVE-2021-47125 concerns a Linux kernel local vulnerability due to a refcount leak in the HTB offload path. The root cause was an incorrect NULL handling around qdisc_refcount_inc in htb_parent_to_leaf_offload, which could leak references if new_q was NULL. The fix adds a NULL pointer check to gua...
CVE-2023-47125
CVE-2023-47125 affects TYPO3’s html-sanitizer: DOM processing instructions are not handled correctly, allowing bypass of the built-in XSS protection. Affected TYPO3/core-html-sanitizer versions are mitigated by upgrading to 1.5.3 or 2.1.4, which fix the issue. The vulnerability arises in the sani...
CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...
TYPO3 8.7.42 < 8.7.55 ELTS / 9.5.29 < 9.5.44 ELTS / 10.4.19 < 10.4.41 ELTS / 11.3.2 < 11.5.33 / 12.0.0 < 12.4.8 XSS (TYPO3-CORE-SA-2023-007)
The version of TYPO3 installed on the remote host is prior to 8.7.42 8.7.55 ELTS / 9.5.29 9.5.44 ELTS / 10.4.19 10.4.41 ELTS / 11.3.2 11.5.33 / 12.0.0 12.4.8. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2023-007 advisory. - DOM processing instructions are not...
CVE-2022-47125
creationtimestamp| type| source ---|---|--- 2022-12-31 00:20:36+00:00| seen| https://t.me/cibsecurity/55606...
CVE-2022-47125
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...
CVE-2022-47125
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...
CVE-2022-47125
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn5g parameter at /goform/WifiBasicSet...
CVE-2022-47125
According to the provided documents, the Tenda A15 (v15.13.07.13) contains a stack overflow vulnerability in the wrlEn_5g parameter of the /goform/WifiBasicSet endpoint. The root cause is described as incorrect boundary checking for the wrlEn_5g input, enabling a remote attacker to trigger a stac...