30 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-6875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors. CVE-2016-6875 Note that Nessus relies...
CVE-2025-6875 SourceCodester Best Salon Management System edit-subscription.php sql injection
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be...
CVE-2025-6875 SourceCodester Best Salon Management System edit-subscription.php sql injection
A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be...
CVE-2023-6875
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and including, 2.8.7...
CVE-2013-6875
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
io.micronaut.testresources:micronaut-test-resources-infinispan (>=3.0.0-M5 <=4.0.0-M1), io.quarkus:quarkus-test-infinispan-client (>=2.5.0.CR1 <=3.2.0.Final) +54 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-server-rest (>=10.0.0.Alpha1 <=9.4.9.Final)
org.infinispan:infinispan-server-rest MAVEN version =10.0.0.Alpha1, =3.0.0-M5, =2.5.0.CR1, =8.0.0.Beta1, =7.0.0.CR1, =15.0.14.Final, =9.3.0.CR1, =9.3.0.CR1, =8.0.0.Alpha1, =9.0.0.Beta1, =9.0.0.Beta1, =15.0.0.CR1, =15.0.0.CR1, =12.1.1.Final, =12.1.1.Final, =16.2.0.Dev02 and more Source cves:...
CVE-2024-6875
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
Wordpress POST SMTP Account Takeover
The POST SMTP WordPress plugin prior to 2.8.7 is affected by a privilege escalation where an unauthenticated user is able to reset the password of an arbitrary user. This is done by requesting a password reset, then viewing the latest email logs to find the associated password reset email. Module...
Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6875-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6875-1 advisory. It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for...
Exploit for Missing Authorization in Wpexperts Post_Smtp
CVE-2023-6875 Exploit for PostSMTP - Unauthorized Account...
Exploit for Missing Authorization in Wpexperts Post_Smtp
CVE-2023-6875 CVE-2023-6875 PoC This is the original proof...
CVE-2023-6875
creationtimestamp| type| source ---|---|--- 2024-01-12 12:01:05+00:00| published-proof-of-concept| https://t.me/truesecator/5286 2024-01-14 05:52:43+00:00| published-proof-of-concept| https://t.me/hackingbra/71 2024-01-14 09:26:15+00:00| published-proof-of-concept| https://t.me/LearnExploit/6019...
CVE-2023-6875
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and including, 2.8.7...
CVE-2023-6875
WordPress POST SMTP Mailer plugin (
WordPress POST SMTP Mailer 2.8.7 Authorization Bypass / Cross Site Scripting
Vulnerability Summary from Wordfence Intelligence Description: POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress = 2.8.7 – Authorization Bypass via type connect-app API Affected Plugin: POST SMTP Mailer – Email log, Delivery Failure Notifications and Be...
WordPress Post SMTP Plugin <= 2.8.7 is vulnerable to Broken Authentication
Software Post SMTP Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A4: Insecure Design Classification Broken Authentication CVE CVE-2023-6875 Patch priority High CVSS severity High 9.8 Developer WPExperts PSID abf9b2b72d3f Credits Ulyses Saicha Required privilege Unauthenticat...
CVE-2018-6875
Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...
CVE-2018-6875
CVE-2018-6875 affects KeepKey v4.0.0: a Format String vulnerability could cause the device to display information it should not access, triggered by text containing characters the device font cannot render. The issue is described across multiple sources (e.g., NVD entry and CNVD/CVE mirrors) as a...
CVE-2015-6875
...