36 matches found
MINI-6738-VCP7-785R
Bulletin has no description...
MINI-W8G4-6738-VQ9C
Bulletin has no description...
CVE-2025-6738
A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads...
CVE-2025-6738
A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads...
CVE-2025-6738
creationtimestamp| type| source ---|---|--- 2025-06-27 00:53:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19661 2025-06-27 04:29:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsksjnvtc32q...
CVE-2025-6738 huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection
A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads...
CVE-2025-6738
CVE-2025-6738 affects huija bicycleSharingServer (up to commit 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a). The vulnerability is in userDao.selectUserByUserNameLike in UserServiceImpl.java, where improper handling of the Username argument enables SQL injection. The issue is remotely exploitable and...
CVE-2023-6738
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayerheadercode', 'pagelayerbodyopencode', and 'pagelayerfootercode' meta fields in all versions up to, and including, 1.7.8 due to insufficient input...
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...
CVE-2024-6738
creationtimestamp| type| source ---|---|--- 2024-07-15 05:58:17+00:00| seen| https://t.me/cvedetector/833 2024-07-30 12:42:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8126...
CVE-2024-6738 WisdomGarden Tronclass - Broken Access Control
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL...
CVE-2024-6738 WisdomGarden Tronclass - Broken Access Control
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL...
Ubuntu 16.04 LTS / 18.04 LTS : LXD vulnerability (USN-6738-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6738-1 advisory. Fabian Bumer, Marcus Brinkmann, and Jrg Schwenk discovered that LXD incorrectly handled the handshake phase and the use of sequence numbers in SSH...
WordPress PageLayer Plugin <= 1.7.8 is vulnerable to Cross Site Scripting (XSS)
Software PageLayer Type Plugin Vulnerable versions = 1.7.8 Fixed in 1.7.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6738 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID daeb2645c329 Credits Nex Team Required privilege...
CVE-2023-6738
creationtimestamp| type| source ---|---|--- 2024-01-04 05:26:18+00:00| seen| https://t.me/ctinow/162770 2024-01-05 01:32:05+00:00| seen| https://t.me/cibsecurity/74392 2024-01-23 19:56:30+00:00| seen| https://t.me/ctinow/172263...
CVE-2023-6738
CVE-2023-6738 affects Page Builder: Pagelayer (WordPress). It is a Stored XSS via pagelayer_header_code, pagelayer_body_open_code, and pagelayer_footer_code meta fields in all versions up to 1.7.8. Exploitation requires contributor-level permissions and user interaction on the injected page. Root...
CVE-2023-6738 PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayerheadercode', 'pagelayerbodyopencode', and 'pagelayerfootercode' meta fields in all versions up to, and including, 1.7.8 due to insufficient input...
CVE-2017-6738
creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 16:03:58+00:00| seen| https://t.me/arpsyndicate/1245 2024-12-24 20:27:42+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971330 2025-01-28 03:22:55+00:00|...
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.33
Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 7.0.0.33 and IBM WebSphere Application Server Hypervisor Edition 7.0.0.33 Vulnerability Details CVE ID:CVE-2013-6323 PI04777 and PI04880 DESCRIPTION: The Administration Console of IBM WebSphere...