CGA-5638-W48X-XG3X

Bulletin has no description...

CVE-2026-5638

creationtimestamp| type| source ---|---|--- 2026-04-06 10:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2l73xjh2o...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This...

CGA-G885-96HV-5638

Bulletin has no description...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

SSP ASSIGNEMENT 3 : CVE poc Exploitation of CVE-2017-5638...

EUVD-2021-27087

Malware in sbrugna...

EUVD-2025-5638

Malicious code in bioql PyPI...

CVE-2025-5638

creationtimestamp| type| source ---|---|--- 2025-06-05 09:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqtxwijg7y2k...

CVE-2025-5638 PHPGurukul Notice Board System admin-profile.php sql injection

A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. Th...

CVE-2025-5638

CVE-2025-5638 affects PHPGurukul Notice Board System 1.0. The vulnerability resides in /admin-profile.php, where manipulating the mobilenumber parameter leads to SQL injection. Exploitation can be performed remotely, and multiple parameters may be affected. Multiple connected sources corroborate ...

CVE-2021-3844

Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session...

CVE-2020-5638

Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

Linux Distros Unpatched Vulnerability : CVE-2012-5638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content o...

Oracle Siebel CRM (April 2017 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2017 CPU advisory. - Vulnerability in the Siebel Apps - E-Billing component of Oracle Siebel CRM subcomponent: Security Struts 2. Supported versions that are affected are 6.1,...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

CVE-2024-5638 Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ticustomizernotifydismissrecommendedplugins' AJAX action in all versions up to, and including, 0.5.1 due to insufficient input sanitization and output escaping. This makes it possible fo...

WordPress Formula Theme <= 0.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Formula Type Theme Vulnerable versions = 0.5.1 Fixed in 0.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5638 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3a71d72e8ae6 Credits blackmoon Required privileg...

Debian: Security Advisory (DSA-5638-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

holidayraceway.com Improper Access Control vulnerability OBB-3801294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...