65 matches found
MINI-4H3J-86MJ-6525
Bulletin has no description...
ManageEngine ADSelfService Plus < Build 6525 Authenticated RCE
According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6525. It is, therefore, affected by an authenticated remote code execution vulnerability. This vulnerability stems from improper access controls to the service used...
MINI-6525-HX2V-GRHQ
Bulletin has no description...
CVE-2026-6525
creationtimestamp| type| source ---|---|--- 2026-05-05 16:19:36+00:00| seen| https://t.me/cKure/16382...
CVE-2026-6525
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4...
CVE-2026-6525
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4...
Linux Distros Unpatched Vulnerability : CVE-2026-6525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 CVE-2026-6525 Note that Nessus relies on the presence of the package as reported by the vendor...
SUSE CVE-2026-6525
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4...
MiracleLinux 9 : nodejs:18 (AXSA:2023-6525:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6525:01 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 nodejs: integrity checks according to...
Linux Distros Unpatched Vulnerability : CVE-2016-6525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute...
CVE-2025-6525
creationtimestamp| type| source ---|---|--- 2025-06-24 00:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscvfip4s32r 2025-06-24 17:49:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19388...
CVE-2025-6525
A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code of the file /cgi-bin/Config.cgi?action=set of the component Configuration Handler. The manipulation leads to improper authorization. The attack needs to be approached within the...
CVE-2025-6525 70mai 1S Configuration Config.cgi improper authorization
A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code of the file /cgi-bin/Config.cgi?action=set of the component Configuration Handler. The manipulation leads to improper authorization. The attack needs to be approached within the...
CVE-2025-6525 70mai 1S Configuration Config.cgi improper authorization
A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code of the file /cgi-bin/Config.cgi?action=set of the component Configuration Handler. The manipulation leads to improper authorization. The attack needs to be approached within the...
CVE-2025-6525
CVE-2025-6525 affects 70mai 1S up to 20250611 with improper authorization in the Configuration Handler via /cgi-bin/Config.cgi?action=set. Exploitation requires local-network access; multiple feeds indicate publicly disclosed exploit and lack of vendor response. Impact is described as unauthorize...
CVE-2024-6525
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...
CVE-2023-6525
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
Linux Distros Unpatched Vulnerability : CVE-2015-6525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial o...