CVE-2021-47949

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2021-47949

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

@arc-directus/api (>=12.0.0, <=12.0.6), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.5) +46 more potentially affected by CVE-2025-47949 via samlify (>=2.5.1, <=2.9.1)

samlify NPM version =2.5.1, =12.0.0, =1.6.3, =1.0.0, =1.0.0, =2.0.0, =9.25.0, =9.26.0, =14.0.1, =3.1.5, =1.2.2, =1.0.0-beta.1, =1.3.0 - @meta-factory/cms 0.1.1 and more Source cves: CVE-2025-47949 Source advisory: OSV:GHSA-R683-V43C-6XQV...

CVE-2025-47949

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fix...

CVE-2025-47949

creationtimestamp| type| source ---|---|--- 2025-05-19 19:38:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16911 2025-05-19 21:12:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114536554270426361 2025-05-19 21:13:10+00:00| seen|...

CVE-2025-47949 samlify SAML Signature Wrapping attack

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fix...

CVE-2025-47949

Summary: samlify (Node.js SAML library) has a Signature Wrapping vulnerability in versions prior to 2.10.0, enabling an attacker to forge a SAML Response to impersonate any user. An attacker would need a signed XML document from the identity provider. Fix/mitigation: Upgrade to version 2.10.0 or ...

CVE-2025-47949 samlify SAML Signature Wrapping attack

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fix...

CVE-2025-47949 samlify SAML Signature Wrapping attack

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fix...

@arc-directus/api (>=12.0.0, <=12.0.6), @bicou/directus-extension-imagga (>=1.6.3, <=1.6.5) +46 more potentially affected by CVE-2025-47949 via samlify (>=2.5.1, <=2.9.1)

samlify NPM version =2.5.1, =12.0.0, =1.6.3, =1.0.0, =1.0.0, =2.0.0, =9.25.0, =9.26.0, =14.0.1, =3.1.5, =1.2.2, =1.0.0-beta.1, =1.3.0 - @meta-factory/cms 0.1.1 and more Source cves: CVE-2025-47949 Source advisory: MEND:CVE-2025-47949...

CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...

JetBrains TeamCity < 2024.07.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.07.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API CVE-2024-47161 - In JetBrains TeamCity before 2024.07.3 path...

CVE-2024-47949

creationtimestamp| type| source ---|---|--- 2024-10-08 18:43:28+00:00| seen| https://t.me/cvedetector/7370...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2022-47949

creationtimestamp| type| source ---|---|--- 2022-12-25 02:39:22+00:00| seen| https://t.me/cibsecurity/55287 2022-12-29 13:19:33+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7445 2022-12-30 17:26:29+00:00| published-proof-of-concept| https://t.me/crackcodes/2035...

CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...

CVE-2022-47949

Summary of CVE-2022-47949 (ENLBufferPwn) : The vulnerability stems from the Nintendo NetworkBuffer class used by Animal Crossing: New Horizons and other Nintendo titles. The two methods, Set and Add, do not validate that incoming data fits the allocated buffer (dataSize), enabling a remote attack...

kachhua.com XSS vulnerability

Vulnerable URL: https://kachhua.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 47949 VIP website status:| Yes Check kachhua.com SSL connection:| Grade: A- Coordinate...