73 matches found
ROOT-OS-DEBIAN-12-CVE-2023-6039 CVE-2023-6039 in rootio-linux - Patched by Root
Root has patched CVE-2023-6039 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ECHO-FD8A-6039-C2C3
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2018-6039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a...
@toptal/picasso (>=49.0.0 <=54.1.4-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0), @toptal/picasso-page (>=5.0.0 <=5.4.18-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0) potentially affected by unknown CVE via @toptal/picasso-accordion (>=3.0.0 <=3.0.9)
@toptal/picasso-accordion NPM version =3.0.0, =49.0.0, =5.0.0, =5.4.18-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-6039...
CVE-2025-6039
creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:18+00:00| seen| Telegram/PW3Jv0LvM8ZoRLikixTRughEUhK3M9n4d76XOr9xi3hug...
CVE-2025-6039
The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6039
CVE-2025-6039 affects the ProcessingJS for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s pjs4wp shortcode in all versions up to and including 1.2.2. With authenticated access at contributor level or higher , an attacker can inject scripts that execute...
CVE-2025-6039 ProcessingJS for WordPress <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress ProcessingJS for WordPress plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin ProcessingJS for WordPress versions = 1.2.2...
CVE-2024-6039
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039
creationtimestamp| type| source ---|---|--- 2025-04-11 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4c3ryk27...
Linux Distros Unpatched Vulnerability : CVE-2023-6039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in lan78xxdisconnect in drivers/net/usb/lan78xx.c in the network sub- component, net/usb/lan78xx in the Linux Kernel. This flaw...
ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure', 'Description' = %q ManageEngine...
CVE-2024-6039
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039 Feng Office Workspaces sql injection
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039 Feng Office Workspaces sql injection
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039
CVE-2024-6039 affects Feng Office 3.11.1.2 in the Workspaces component. The vulnerability stems from improper handling of the dim argument, leading to a SQL injection that can be triggered remotely. Public exploit info is noted in multiple sources. Impact is described as critical in the CVE recor...
Ubuntu: Security Advisory (USN-6706-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerability (USN-6706-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6706-1 advisory. It was discovered that the Microchip USB Ethernet driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free...
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:4732-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...