23 matches found
MAL-2026-9477 Malicious code in wprwn5accxyz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-9477
creationtimestamp| type| source ---|---|--- 2026-06-22 04:31:49+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou2jiad7722...
CVE-2018-9477
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
MAL-2025-9477 Malicious code in @taktikangea/saepe-ducimus (npm)
The package @taktikangea/saepe-ducimus was found to contain malicious code...
CVE-2020-9477
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...
CVE-2015-9477
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...
CVE-2018-9477
creationtimestamp| type| source ---|---|--- 2024-11-20 17:35:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113516486661985667 2024-11-20 19:36:29+00:00| seen| https://t.me/cvedetector/11649...
CVE-2024-9477
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...
CVE-2024-9477
creationtimestamp| type| source ---|---|--- 2024-11-13 14:36:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113476147223889900 2024-11-13 17:13:30+00:00| seen| https://t.me/cvedetector/10821...
CVE-2024-9477 XSS in AirTies' Air4443 Firmware
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...
CVE-2024-9477
CVE-2024-9477 describes an XSS in AirTies Air4443 Firmware caused by improper input neutralization during web page generation. Affected product: AirTies Air4443 Firmware (versions through 14102024). Root cause identified as improper input handling in web page generation, enabling cross-site scrip...
CVE-2024-9477 XSS in AirTies' Air4443 Firmware
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...
com.carecon.fabric3:fabric3-tomcat7-extension (>=3.0.0, <=3.1.0), com.cloudbees:cloudbees-web-container-extras (>=1.0.0, <=1.0.7) +123 more potentially affected by CVE-2016-6816 via org.apache.tomcat:tomcat-coyote (>=7.0.0, <=7.0.72)
org.apache.tomcat:tomcat-coyote MAVEN version =7.0.0, =3.0.0, =1.0.0, =1.3, =1.5, =1.0.0, =1.0.0, =2.1, =1.8.0, =1.7.0, =1.9.0-rc1, =2.0.0 - de.metalcon.utils:form-item-list 1.0.0 - de.skiptag.roadrunner:roadrunner-servlet 0.1 - de.skiptag.roadrunner:roadrunner-spring 0.1 -...
CVE-2020-9477
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...
CVE-2020-9477
CVE-2020-9477 concerns HUMAX HGA12R-02 BRGCAA 1.1.53 devices where a flaw in the web-based authentication allows an unauthenticated remote attacker to capture authentication packets and obtain the cleartext password. This enables the attacker to create a new user account or take control of the de...
CVE-2015-9477
creationtimestamp| type| source ---|---|--- 2019-10-10 20:31:20+00:00| seen| https://t.me/cibsecurity/7339...
CVE-2017-9477
The CVE-2017-9477 entry describes a vulnerability in Cisco DPC3939 firmware (CMST builds: dpc3939-P20-18-v303r20421733-160420a-CMCST and dpc3939-P20-18-v303r20421746-170221a-CMCST) where remote attackers can discover the CM MAC address by connecting to the device’s xfinitywifi hotspot. Affected p...