CVE-2026-5253 bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue of the component editNotice Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be...

CVE-2026-5253

CVE-2026-5253 affects bufanyun HotGo 1.0/2.0. Affected is an unknown functionality in /web/src/layout/components/Header/MessageList.vue of the editNotice endpoint. The issue allows remote cross-site scripting via a manipulation of that component; the exploit is publicly available. Attack requires...

EUVD-2022-5253

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-5253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file usually .nethackrc which could be exploited. This bug is...

CVE-2025-5253

creationtimestamp| type| source ---|---|--- 2025-07-25 11:39:05+00:00| seen| Telegram/7jA2-RNIUXvyXqmNd1P1LjehcQv6EPTHB82GvEhijrY3U4...

CVE-2025-5253

CVE-2025-5253 affects Kron Technologies’ Kron PAM prior to version 3.7. The issue is described as an HTTP DoS caused by unrestricted resource allocation (or throttling), enabling resource exhaustion under HTTP requests. Affected component is Kron PAM’s HTTP handling; product/version details indic...

CVE-2018-5253

The AP4FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling...

CVE-2019-5253

E5572-855 with versions earlier than 8.0.1.3H335SP1C233 has an improper authentication vulnerability. The device does not perform a sufficient authentication when doing certain operations, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle...

nethack-3.4.3-6.1 on GA media (moderate)

nethack-3.4.3-6.1 on GA media Announcement ID: openSUSE-SU-2025:14898-1 Rating: moderate Cross-References: CVE-2020-5253 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the nethack-3.4.3-6.1...

CVE-2024-5253

creationtimestamp| type| source ---|---|--- 2024-07-17 09:51:33+00:00| seen| https://t.me/cvedetector/1059...

CVE-2024-5253 Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultteam shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2019-5253

creationtimestamp| type| source ---|---|--- 2024-03-12 09:41:32+00:00| seen| https://t.me/ctinow/205426...

CVE-2023-5253

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be...

CVE-2023-5253

CVE-2023-5253 affects Nozomi Networks Guardian/CMC: a missing authentication check in the WebSocket channel used for the Check Point IoT integration can allow an unauthenticated attacker to obtain assets data. The vulnerability impacts the WebSocket handling that exposes asset information without...

CVE-2013-5253

creationtimestamp| type| source ---|---|--- 2023-11-04 08:44:16+00:00| seen| https://t.me/cibsecurity/70480...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Rack vulnerabilities (USN-5253-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5253-1 advisory. It was discovered that Rack insecurely handled session ids. An unauthenticated remote attacker could possibly use this issue to...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-samlIdpWebapp (>=1.2.0 <=1.2.4), org.apache.cxf.fediz:fediz-idp (>=1.2.0 <=1.2.4) +2 more potentially affected by CVE-2015-5253 via org.apache.cxf:cxf-rt-rs-security-sso-saml (>=3.0.0 <=3.0.6)

org.apache.cxf:cxf-rt-rs-security-sso-saml MAVEN version =3.0.0, =1.2.0, =1.2.0, =3.0.5, =3.0.0, =3.0.16 Source cves: CVE-2015-5253 Source advisory: OSV:GHSA-3336-H95J-HVVF...

com.eurodyn.qlack2.util:qlack2-util-apache-santuario-fragment (>=2.3.3 <=2.3.19), com.eurodyn.qlack2.util:qlack2-util-sso (>=2.3.3 <=2.3.19) +10 more potentially affected by CVE-2015-5253 via org.apache.cxf:cxf-rt-rs-security-sso-saml (>=3.1.0 <=3.1.2)

org.apache.cxf:cxf-rt-rs-security-sso-saml MAVEN version =3.1.0, =2.3.3, =2.3.3, =1.3.2, =1.4.0, =1.3.2, =1.4.0, =3.1.0, =3.1.0, =2.0.3, =2.0.3, =5.2.0-RC1, =5.2.0-RC3 Source cves: CVE-2015-5253 Source advisory: OSV:GHSA-3336-H95J-HVVF...

org.apache.cxf:apache-cxf (>=2.7.10 <=2.7.17) potentially affected by CVE-2015-5253 via org.apache.cxf:cxf-rt-rs-security-sso-saml (>=2.7.10 <=2.7.17)

org.apache.cxf:cxf-rt-rs-security-sso-saml MAVEN version =2.7.10, =2.7.10, =2.7.17 Source cves: CVE-2015-5253 Source advisory: OSV:GHSA-3336-H95J-HVVF...

CVE-2020-5253

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file usually .nethackrc which could be exploited. This bug is patched in NetHack 3.6.0...