30 matches found
WordPress InfiniteWP <1.9.4.5 - Authorization Bypass
WordPress InfiniteWP plugin before 1.9.4.5 for WordPress contains an authorization bypass vulnerability via a missing authorization check in iwpmmbsetrequest in init.php. An attacker who knows the username of an administrator can log in, thereby making it possible to obtain sensitive information,...
MINI-8772-V5FR-6CJH
Bulletin has no description...
CVE-2026-8772
CVE-2026-8772 affects linlinjava litemall up to 1.8.0, targeting an unknown function in the Admin Endpoint. The vulnerability allows remote SQL injection through manipulated input across multiple endpoints. Exploitation is publicly available, and the attack can proceed without user interaction, w...
CVE-2026-8772 linlinjava litemall Admin Endpoint sql injection
A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for...
MAL-2025-8772 Malicious code in @malware-test-lotes-bosks-barye-estop/test-mlw3-lotes-bosks-barye-estop (npm)
The package @malware-test-lotes-bosks-barye-estop/test-mlw3-lotes-bosks-barye-estop was found to contain malicious code...
CVE-2025-8772
A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack m...
CVE-2025-8772 Vinades NukeViet Module index.php server-side request forgery
A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack m...
CVE-2024-8772
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited...
CVE-2024-8772
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited...
CVE-2024-8772
creationtimestamp| type| source ---|---|--- 2024-11-26 07:31:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113548087542643396 2025-03-28 07:27:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9272...
CVE-2024-8772
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited...
CVE-2024-8772
51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited...
CVE-2024-8772
The CVE-2024-8772 issue affects AXIS OS (AXIS devices) via the VAPIX API endpoint managedoverlayimages.cgi. The vulnerability is a race condition that can be exploited to block access to the overlay configuration page in the web interface, and it requires authentication with an operator- or admin...
CVE-2019-8772
creationtimestamp| type| source ---|---|--- 2024-03-15 09:41:29+00:00| seen| https://t.me/ctinow/208556...
CVE-2020-8772
creationtimestamp| type| source ---|---|--- 2020-02-10 11:42:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpinfinitewpauthbypass.rb 2025-10-23 21:12:59+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2020-8772
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwpmmbsetrequest in init.php. Any attacker who knows the username of an administrator can log in...
CVE-2020-8772
The CVE-2020-8772 entry concerns the WordPress InfiniteWP Client plugin prior to 1.9.4.5, which contains a missing authorization check in iwp_mmb_set_request (init.php). Exploitation allows an attacker who knows an administrator’s username to log in as that user, enabling access to sensitive info...
CVE-2019-8772
An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10.15. An attacker may be able to exfiltrate the contents of an encrypted PDF...
CVE-2019-8772
CVE-2019-8772 affects macOS PDFKit: an issue in the handling of links in encrypted PDFs allowed potential exfiltration of encrypted PDF contents. The vulnerability was addressed by adding a confirmation prompt, and is fixed in macOS Catalina (10.15). Affected component: PDFKit in macOS; attack su...