Lucene search
+L

25 matches found

Wolfi
Wolfi
added 2026/05/20 7:55 a.m.15 views

CVE-2026-8525 vulnerabilities

Vulnerabilities for packages: chromium...

8.3CVSS5.8AI score0.00229EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/05/16 12:20 a.m.23 views

Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.8AI score0.00229EPSS
SaveExploits0
OSV
OSV
added 2026/05/14 8:17 p.m.4 views

DEBIAN-CVE-2026-8525

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6AI score0.00229EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/05/14 8:17 p.m.10 views

CVE-2026-8525

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6AI score0.00229EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/14 7:52 p.m.15 views

CVE-2026-8525

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6AI score0.00229EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/08/04 9:15 p.m.10 views

CVE-2025-8525

A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown part of the component Spring Boot Admin/Spring Actuator. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been...

6.9CVSS0.00433EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/04 8:32 p.m.26 views

CVE-2025-8525

CVE-2025-8525 affects Exrick xboot up to 3.3.4, with a root cause tied to an information disclosure in the area of Spring Boot Admin/Spring Actuator . The vulnerability can be triggered remotely and the exploit has been publicly disclosed. Multiple connected sources corroborate the same impact an...

6.9CVSS5.2AI score0.00433EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/02/17 12:0 a.m.19 views

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

10CVSS5.5AI score0.0143EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/17 12:0 a.m.9 views

Automated Logic WebCTRL Premium Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8525)

CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists which could allow an unauthenticated user to upload files of dangerous types without restrictions, leading to remote command execution. This plugin only works with Tenable.ot. Please visit...

10CVSS5.5AI score0.0143EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/21 3:32 p.m.80 views

CVE-2024-8525

CVE-2024-8525 affects Automated Logic WebCTRL 7.0 (Premium Server). The issue is an unrestricted upload of a file with a dangerous type that an unauthenticated attacker can exploit via a crafted HTTP POST to achieve remote command execution and upload of a malicious file. Multiple connected sourc...

10CVSS6.9AI score0.0143EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/21 3:32 p.m.16 views

CVE-2024-8525 Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file...

10CVSS7.2AI score0.0143EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/21 3:32 p.m.23 views

CVE-2024-8525 Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file...

10CVSS0.0143EPSS
SaveExploits0References2
Circl
Circl
added 2024/11/21 11:0 a.m.10 views

CVE-2024-8525

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-01 2024-11-21 15:34:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113521672720175626...

10CVSS6.8AI score0.0143EPSS
SaveExploits0References2
Circl
Circl
added 2020/10/27 11:30 p.m.6 views

CVE-2019-8525

creationtimestamp| type| source ---|---|--- 2020-10-27 23:30:40+00:00| seen| https://t.me/cibsecurity/15628...

7.2CVSS7.3AI score0.0037EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/27 7:23 p.m.94 views

CVE-2019-8525

CVE-2019-8525 is a memory corruption issue described as fixed by Apple in multiple updates (macOS Mojave 10.14.4/10.14.5, High Sierra/Sierra Security Updates, watchOS 5.2, iOS 12.2). The description states that an application may be able to execute arbitrary code with kernel privileges and ties t...

7.2CVSS7.2AI score0.0037EPSS
SaveExploits0References4Affected Software3
Openbugbounty
Openbugbounty
added 2020/03/17 1:56 p.m.9 views

ahwi-russia.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ahwi-russia.ru website and its users. Following coordinate...

0.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/02/25 5:10 p.m.7 views

bolsadevaloresaovivo.com.br Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bolsadevaloresaovivo.com.br website and its users. Followi...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/02/05 4:25 p.m.13 views

biathlontargets.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting biathlontargets.com website and its users. Following...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/01/28 7:13 p.m.5 views

pabakery.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pabakery.com website and its users. Following coordinated...

0.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2019/12/15 10:56 p.m.5 views

congtyvietpro.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting congtyvietpro.com website and its users. Following...

0.1AI score
SaveExploits0
Rows per page
Query Builder