RHEL 8 : libarchive (RHSA-2026:8521)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8521 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660...

SUSE CVE-2026-5121

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...

CVE-2026-5121

creationtimestamp| type| source ---|---|--- 2026-03-30 12:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmfwrwoo22 2026-03-31 17:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mienofpx762r 2026-03-31 17:24:25+00:00| published-proof-of-concept|...

DEBIAN-CVE-2026-5121

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...

CVE-2026-5121

CVE-2026-5121 and CVE-2026-4424 affect libarchive, with a vulnerability in ISO9660 image processing (32-bit) that can cause a heap overflow when processing a crafted ISO9660 image, potentially enabling arbitrary code execution. Described as a 32-bit integer overflow in zisofs block pointer alloca...

CVE-2025-5121 Missing Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group...

CVE-2025-5121

CVE-2025-5121 affects GitLab CE/EE versions 17.11 prior to 17.11.4 and 18.0 prior to 18.0.2. The issue is a missing authorization check that could allow applying compliance frameworks to projects outside the intended group. Public documents confirm the vulnerability description across multiple fe...

CVE-2025-5121 Missing Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group...

CVE-2025-5121 Missing Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group...

CVE-2025-5121

creationtimestamp| type| source ---|---|--- 2025-06-14 08:04:11+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3lrkihsrxhg2i 2025-06-15 13:25:42+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/114687602718708639 2025-06-20 17:46:22+00:00| seen|...

CVE-2009-5121

Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session...

CVE-2019-5121

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter uuid in /objects/pluginSwitch.json.php...

MOXA多款产品 跨站脚本漏洞

MOXA MGate 5121 and others are an industrial Ethernet gateway from China-based MOXA. A cross-site scripting vulnerability exists in various MOXA products, which stems from insufficient cleaning and coding of user input, making them susceptible to stored cross-site scripting attacks. The following...

CVE-2024-5121

SourceCodester Event Registration System 1.0 contains a cross-site scripting vulnerability in the /registrar/?page=registration endpoint, caused by unsafe handling of the e parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Several sources confirm the issue, inc...

CVE-2024-5121 SourceCodester Event Registration System cross site scripting

A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /registrar/?page=registration. The manipulation of the argument e leads to cross site scripting. The attack can be...

CVE-2012-5121

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/810 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25...

CVE-2019-5121

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:34+00:00| seen| https://t.me/ctinow/175119...

CVE-2023-5121

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings the backup path parameter in versions up to, and including, 0.9.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2023-5121

CVE-2023-5121 affects the WordPress plugin “Migration, Backup, Staging – WPvivid” (WPvivid Backup/Restore). The vulnerability is a Stored Cross‑Site Scripting (XSS) in the backup path parameter due to insufficient input sanitization and output escaping. Affected versions are up to and including 0...

CVE-2023-5121 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings the backup path parameter in versions up to, and including, 0.9.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...