94 matches found
CVE-2015-6125
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:20+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:10+00:00| seen|...
CVE-2026-6125 Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection
A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code...
EUVD-2017-2972
Malware in sbrugna...
EUVD-2018-20727
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-6125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information v...
CVE-2025-6125
creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18457 2025-06-16 15:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqcrk6kjp25...
CVE-2025-6125 PHPGurukul Rail Pass Management System aboutus.php cross site scripting
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2025-6125 PHPGurukul Rail Pass Management System aboutus.php cross site scripting
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2025-6125
CVE-2025-6125 affects PHPGurukul Rail Pass Management System 1.0. Affected is an unknown function in /admin/aboutus.php where manipulating the pagedes parameter leads to cross-site scripting. Exploitation can be remote, and the exploit has been disclosed publicly. Several connected sources corrob...
CVE-2024-6125 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism
The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for...
CVE-2024-6125 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism
The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for...
WordPress Login with phone number Plugin <= 1.7.34 is vulnerable to Broken Access Control
Software Login with phone number Type Plugin Vulnerable versions = 1.7.34 Fixed in 1.7.35 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-6125 Patch priority Low CVSS severity Low 8.1 Developer Hamid Alinia PSID b1915aa020d8 Credits István Márton Required...
CVE-2023-6125 Code Injection in salesagility/suitecrm
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6125 Code Injection in salesagility/suitecrm
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6125
SuiteCRM CVE-2023-6125 is a Code Injection vulnerability in the salesagility/suitecrm project, affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. The NVD entry rates it HIGH (8.8 CVSSv3.1) with network attack vector, low attack complexity, and no user interaction, indicating potential remote...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : snapd vulnerability (USN-6125-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6125-1 advisory. It was discovered that the snap sandbox did not restrict the use of the ioctl system call with a TIOCLINUX request. Th...
curl: CVE-2023-28321: IDN wildcard match
An improper validation of a certificate with host mismatch vulnerability was found in curl/libcurl, which allowed an attacker to perform a man-in-the-middle attack. The vulnerability was caused by the use of wildcards for validation during TLS communication, even if the hostname is an IDN. This...
Mageia: Security Advisory (MGASA-2013-0376)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...