22 matches found
CVE-2026-9095
creationtimestamp| type| source ---|---|--- 2026-05-28 19:46:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwry2puay2e 2026-05-28 21:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6euqtt2w...
MAL-2025-9095 Malicious code in @marcos_feitoza/test-release (npm)
The package @marcosfeitoza/test-release was found to contain malicious code...
CVE-2024-9095
In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a...
CVE-2024-9095
creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:52+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmi2bray2p 2025-03-20 12:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836039010317 2025-03-20 19:18:37+00:00|...
CVE-2024-9095
In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a...
Moxa MB3xxx Series Protocol Gateways Use of a Broken or Risky Cryptographic Algorithm (CVE-2019-9095)
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access. This plugin only works with...
CVE-2020-9095
CVE-2020-9095 affects Huawei P30 Pro devices with versions earlier than 10.1.0.160 (C00E160R2P8). The root cause is an integer overflow due to insufficient verification when processing messages from other modules, enabling an attacker to send a malicious message and cause overflow, potentially di...
CVE-2019-9095
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access...
CVE-2019-9095
CVE-2019-9095 affects Moxa MGate MB31xx/MB32xx/MB36xx/MB3180 gateways. The vulnerability arises from use of a broken or risky cryptographic algorithm that may allow an attacker to intercept weakly encrypted passwords and gain administrative access. Affected firmware versions include MB3170/MB3270...
Diving Log 6.0 - XML External Entity Injection Vulnerability
Exploit for windows platform in category local exploits + Exploit Title: Diving Log 6.0 XXE Injection + Exploit Author: Trent Gordon + Vendor Homepage: http://www.divinglog.de + Software Link: http://www.divinglog.de/english/download/ + Disclosed at: https://thenopsled.com/divinglog.txt + Version...
Diving Log 6.0 - XML External Entity Injection
Diving Log 6.0 - XML External Entity Injection + Exploit Title: Diving Log 6.0 XXE Injection + Date: 27-11-2017 + Exploit Author: Trent Gordon + Vendor Homepage: http://www.divinglog.de + Software Link: http://www.divinglog.de/english/download/ + Disclosed at: https://thenopsled.com/divinglog.txt...
Diving Log 6.0 XML External Entity Injection
Exploit Title: Diving Log 6.0 XXE Injection + Date: 27-11-2017 + Exploit Author: Trent Gordon + Vendor Homepage: http://www.divinglog.de + Software Link: http://www.divinglog.de/english/download/ + Disclosed at: https://thenopsled.com/divinglog.txt + Version: 6.0 + Tested on: Windows 7 SP1,...
Diving Log 6.0 - XML External Entity Injection
Exploit Title: Diving Log 6.0 XXE Injection + Date: 27-11-2017 + Exploit Author: Trent Gordon + Vendor Homepage: http://www.divinglog.de + Software Link: http://www.divinglog.de/english/download/ + Disclosed at: https://thenopsled.com/divinglog.txt + Version: 6.0 + Tested on: Windows 7 SP1,...
CVE-2017-9095
XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import...
CVE-2016-9095
CVE-2016-9095 entry is rejected and not used, per the initial description.
CVE-2014-9095
CVE-2014-9095 affects Raritan Power IQ versions 4.1.0 and 4.2.1, where SQL injection is possible through the sort or dir parameters in license/records. The vulnerability allows remote attackers to execute arbitrary SQL commands. Public references confirm the issue and CVSS v2 base score 7.5 (High...
Fedora Update for v8 FEDORA-2014-9095
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Core 10 FEDORA-2009-9095 (libmikmod)
The remote host is missing an update to libmikmod announced via advisory FEDORA-2009-9095. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...