90 matches found
CVE-2025-5950 IndieBlocks <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kind Parameter
The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2023-5950
Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user's web browser. This vulnerability is fixed in...
CVE-2020-5950
On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role...
CVE-2025-28229
Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges...
Orban OPTIMOD 5950 Firmware和Orban OPTIMOD 5950 System 安全漏洞
The Orban OPTIMOD 5950 Firmware and the Orban OPTIMOD 5950 System are both products of Orban Corporation.The Orban OPTIMOD 5950 Firmware is an audio processor firmware.The Orban OPTIMOD 5950 System is an audio processor system. A security vulnerability exists in the Orban OPTIMOD 5950 Firmware an...
CVE-2025-28229: Improper Access Control
Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges...
PT-2025-17299 · Orban · Orban Optimod 5950
Name of the Vulnerable Software and Affected Versions: Orban OPTIMOD 5950 Firmware version 1.0.0.2 Orban OPTIMOD 5950 System version 2.2.15 Description: The issue is related to incorrect access control, allowing attackers to bypass authentication and gain Administrator privileges. Recommendations...
Linux Distros Unpatched Vulnerability : CVE-2018-5950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options...
CVE-2024-5950
Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...
CVE-2023-5950 Rapid7 Velociraptor Reflected XSS
This advisory covers a specific issue identified in Velociraptor and disclosed by a security code review. We want to thank Mathias Kujala for working with the Velociraptor team to identify and rectify this issue. It has been fixed as of Version 0.7.0-4, released November 6, 2023. CVSS · HIGH ·...
CVE-2023-5950
CVE-2023-5950 – Rapid7 Velociraptor : Reported as a reflected cross-site scripting vulnerability in Velociraptor versions prior to 0.7.0-4, enabling attackers to inject JS via the error path. A fix is available in version 0.7.0-04, with patches also provided for 0.6.9 (0.6.9-1). Several connected...
SUSE: Security Advisory (SUSE-SU-2019:13924-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-5950
creationtimestamp| type| source ---|---|--- 2020-12-11 22:38:59+00:00| seen| https://t.me/cibsecurity/20483 2020-12-11 22:54:32+00:00| seen| https://t.me/cibsecurity/20502 2020-12-11 23:25:27+00:00| seen| https://t.me/cibsecurity/20522 2020-12-12 00:25:27+00:00| seen| https://t.me/cibsecurity/205...
CVE-2020-5950
CVE-2020-5950 affects F5 BIG-IP 14.1.0–14.1.2.6, with undisclosed iControl REST endpoints enabling reflected XSS that could lead to complete BIG-IP compromise if the victim is admin. Public sources (NVD/Red Hat/CVE listings) reiterate the affected range and vulnerability description. The F5 advis...
Mailman 2.1.23 Cross Site Scripting
Title: Mailman 1.x 2.1.23 - Cross Site Scripting XSS Type: Reflected XSS Software: Mailman Version: =1.x = 2.1.23 Vendor Homepage: https://www.list.org Original link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5950 POC Author: Valerio Alessandroni Date: 28/10/2020 Description:...
Rockwell Automation Allen-Bradley Stratix 5950
1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley Stratix 5950 Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write a...
CVE-2018-5950
A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...
Rockwell Automation 1783-SAD4T0SBK9 Stratix 5950 Industrial EtherNet/IP Security Appliance
Binary data 764939.prm...