CVE-2026-5566

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public...

CVE-2026-5566

The CVE-2026-5566 entry concerns UTT HiPER 1250GW up to version 3.2.7-210907-180535. A buffer overflow is caused by using strcpy in the file /goform/formNatStaticMap when the NatBind argument is manipulated. This leads to remote code execution with a high impact on confidentiality, integrity, and...

CVE-2026-5566

creationtimestamp| type| source ---|---|--- 2026-04-04 16:46:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116347447898521039 2026-04-05 14:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miqvwfzl642m 2026-04-05 15:16:27+00:00| published-proof-of-concep...

PT-2026-30383

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions through 3.2.7-210907-180535 Description A flaw exists in UTT HiPER 1250GW that allows for remote exploitation. The issue resides in the strcpy function within the /goform/formNatStaticMap file. Manipulation of the...

CVE-2025-5566

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3s7pzpnb2...

CVE-2025-5566

A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown part of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-5566 PHPGurukul Notice Board System search-notice.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown part of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-5566

CVE-2025-5566 pertains to PHPGurukul Notice Board System 1.0, where the argument searchdata in the file /search-notice.php can be manipulated to trigger an SQL injection. The vulnerability is exploitable remotely and has been publicly disclosed. The available sources describe an(SQL) injection vu...

CVE-2024-5566

An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6,...

CVE-2023-5566

creationtimestamp| type| source ---|---|--- 2025-05-22 16:51:14+00:00| seen| https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab...

CVE-2020-5566

Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'...

CGA-JRG2-7VWV-5566

Bulletin has no description...

CVE-2024-5566

creationtimestamp| type| source ---|---|--- 2024-07-17 00:39:28+00:00| seen| https://t.me/cvedetector/1023...

CVE-2024-5566 Improper Privilege Management allows for access to unauthorized repository content during migration

An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6,...

CVE-2024-5566 Improper Privilege Management allows for access to unauthorized repository content during migration

An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6,...

CGA-P2XM-686F-5566

Bulletin has no description...

Debian DSA-5566-1 : thunderbird - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5566 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and leak memory data into the images created on...

CVE-2023-5566

The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5566 Simple Shortcodes <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5566

The CVE-2023-5566 issue affects the WordPress Simple Shortcodes plugin up to version 1.0.20. It enables Stored Cross-Site Scripting via shortcodes due to insufficient input sanitization and output escaping of user-supplied attributes, allowing authenticated attackers with contributor-level (or hi...