32 matches found
CVE-2026-9060
The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and outputting it on the Store Locator WordPress plugin before 1.6.6 admin page, allowing high-privileged users such as administrators to perform Stored Cross-Site Scripting attacks...
CVE-2026-9060
creationtimestamp| type| source ---|---|--- 2026-06-10 10:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkhks5y62p...
EUVD-2020-9060
Malware in sbrugna...
CVE-2025-9060
creationtimestamp| type| source ---|---|--- 2025-08-16 01:31:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwi7vzyqui2x...
MAL-2025-9060 Malicious code in @malware-test-wasms-alkyl-untie-staph/test-mlw3-wasms-alkyl-untie-staph (npm)
The package @malware-test-wasms-alkyl-untie-staph/test-mlw3-wasms-alkyl-untie-staph was found to contain malicious code...
CVE-2024-9060
The AVIF & SVG Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary w...
CVE-2019-9060
An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module in the file action.setdefaulttemplate.php with the m1filename parameter; and through the action.showmessage.php file, it is possible to read arbitrary file content...
Linux Distros Unpatched Vulnerability : CVE-2018-9060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...
CVE-2024-9060
creationtimestamp| type| source ---|---|--- 2024-10-01 12:44:43+00:00| seen| https://t.me/cvedetector/6740...
CVE-2024-9060 AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The AVIF & SVG Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary w...
CVE-2020-9060
creationtimestamp| type| source ---|---|--- 2022-01-10 16:20:57+00:00| seen| https://t.me/cibsecurity/35161...
CVE-2020-9060
Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource...
CVE-2020-9060
The CVE-2020-9060 entry concerns Silicon Labs 500-series Z-Wave chipsets using S2, with a denial-of-service/resource-exhaustion risk triggered by malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages. Concrete affected devices/versions from connected docs inclu...
CVE-2019-9060
creationtimestamp| type| source ---|---|--- 2021-09-17 20:23:42+00:00| seen| https://t.me/cibsecurity/29059...
CVE-2019-9060
CMS Made Simple 2.2.8 is affected by CVE-2019-9060 via the CGExtensions module (action.setdefaulttemplate.php) using m1_filename for unauthenticated path traversal and through action.showmessage.php with m1_prefname cg_errormsg and m1_resettodefault=1 to read arbitrary files. Impact: partial conf...
CVE-2019-9060
An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module in the file action.setdefaulttemplate.php with the m1filename parameter; and through the action.showmessage.php file, it is possible to read arbitrary file content...
CVE-2018-9060
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
R 3.4.4 Local Buffer Overflow
!/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link: https://cloud.r-project.org/bin/windows/ Tested On: Window...
R 3.4.4 fow Windows - Local Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link:...