51 matches found
CVE-2017-5415
Este repositorio no tiene un README...
Exploit for CVE-2026-5415
CVE-2026-5415 C...
CVE-2026-5415
creationtimestamp| type| source ---|---|--- 2026-06-05 20:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwim4aqz2b 2026-06-06 00:00:16+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldv73u4r2d 2026-06-13 05:16:07+00:00| seen|...
CVE-2012-5415
Race condition on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service CPU consumption or device reload by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272...
MSC-2024-5415
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...
CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to...
CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to...
CVE-2024-5415
PhpMyBackupPro 2.3 is affected by a cross‑site scripting (XSS) vulnerability in the /phpmybackuppro/backup.php endpoint via the comments and db parameters. The issue allows crafting a URL to exfiltrate session details; CVSSv3.1 vectors indicate Network attack, low complexity, no privileges, user ...
Oracle Linux 8 : exempi (ELSA-2024-3066)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3066 advisory. - Fix CVE-2020-18652 - Fix CVE-2020-18651 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-2023-5415
creationtimestamp| type| source ---|---|--- 2023-12-20 13:48:34+00:00| seen| https://t.me/ctinow/156958...
CVE-2023-5415
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaddcategory function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to...
CVE-2023-5415
CVE-2023-5415 concerns the WordPress plugin Funnelforms Free. The vulnerability arises from a missing capability check in the fnsf_add_category function, allowing authenticated users with subscriber-level permissions and above to add new categories. Affected: Funnelforms Free (WordPress plugin) u...
CVE-2016-5415
CVE-2016-5415 entry is rejected/not used and does not represent an active vulnerability.
Mageia: Security Advisory (MGASA-2018-0018)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Security Advisory (MFSA2017-05) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-5415
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this...
CVE-2020-5415
CVE-2020-5415 affects Concourse when using the GitLab authentication connector. Versions prior to 6.3.1 and 6.4.1 are vulnerable to identity spoofing by configuring a GitLab account whose full name matches another user granted access to a Concourse team, allowing impersonation. GitLab groups are ...
CVE-2020-5415 Concourse's GitLab auth allows impersonation
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this...
