MINI-M8X2-JXCJ-9863

Bulletin has no description...

MAL-2025-9863 Malicious code in @zalastax/nolb-_cheg (npm)

The package @zalastax/nolb-cheg was found to contain malicious code...

CVE-2024-9863

creationtimestamp| type| source ---|---|--- 2024-10-17 04:56:08+00:00| seen| https://t.me/cvedetector/8134...

CVE-2024-9863

CVE-2024-9863 affects the WordPress UserPro plugin (versions up to 3.6.0). Root cause: insecure default_user_role setting (administrator) enables unauthenticated users to register an administrator. Impact: privilege escalation; can occur even if registration is disabled. Public details confirm af...

WordPress Miniorange OTP Verification with Firebase Plugin <= 3.6.0 is vulnerable to Privilege Escalation

Software Miniorange OTP Verification with Firebase Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.6.1 OWASP Top 10 A5: Security Misconfiguration Classification Privilege Escalation CVE CVE-2024-9863 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 768f87fd904b Credits...

CVE-2018-9863

The CVE-2018-9863 entry concerns the express-useragent Node.js/ExpressJS middleware. The connected documents reveal a concrete vulnerability: lack of sanitization/escaping of the HTTP User-Agent header , which an attacker can exploit to trigger Cross-site Scripting (XSS) . Impact described across...

Backdoor.Win32.PsyRat.b Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5817183894cb513239f6aef28895130c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.PsyRat.b Vulnerability: Unauthenticated Remote Command Execution Description: The...

Backdoor.Win32.PsyRat.b Denial Of Service

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5817183894cb513239f6aef28895130cB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.PsyRat.b Vulnerability: Remote Denial of Service Description: The PsyRAT 1.02 malwar...

CVE-2020-9863

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9863

CVE-2020-9863 affects Apple platforms (iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8). Description: a memory initialization issue was fixed via improved memory handling; impact: an application may execute arbitrary code with kernel privileges. Mitigation: apply the Appl...

CVE-2019-9863

CVE-2019-9863 concerns the ABUS Secvest wireless alarm system FUAA50000 (v3.01.01) and its remote controls FUBE50014/FUBE50015. The root cause is an insecure algorithm used for rolling codes, which enables an attacker to predict valid future rolling codes and remotely control the alarm system in ...

Node.js third-party modules: XSS in express-useragent through HTTP User-Agent

Hello, I would like to report an XSS in express-useragent module due a lack of validating User-Agent header. Please note I already created an Github issue and asked for CVE CVE-2018-9863. I did not know about Node.js third-party modules on hackerone. Description express-useragent is simple...

CVE-2017-9863

SMA Solar Technology Sunny Explorer-related CSRF vulnerability (CVE-2017-9863) affects Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30. When a user runs Sunny Explorer and visits a malicious host, an unauthenticated attacker can exploit cross-site request forgery to change inverter setting...

CVE-2016-1000370

This entry (CVE-2016-1000370) is a reservation duplicate of CVE-2016-9863 and does not introduce a new vulnerability. CVE-2016-9863 describes a Denial of Service in phpMyAdmin caused by using a very large request to the table partitioning function, affecting all 4.6.x versions prior to 4.6.5. The...

CVE-2016-9863

CVE-2016-9863 : In phpMyAdmin, a very large request to the table partitioning function can cause a Denial of Service. Affected: phpMyAdmin 4.6.x prior to 4.6.5. Remediation: upgrade to 4.6.5 or later.

DOS vulnerability in table partitioning

PMASA-2016-68 Announcement-ID: PMASA-2016-68 Date: 2016-11-25 Updated: 2016-12-06 Summary DOS vulnerability in table partitioning Description With a very large request to table partitioning function, it is possible to invoke a Denial of Service DOS attack. Severity We consider this vulnerability ...

CVE-2014-9863

The CVE-2014-9863 issue is a local privilege escalation in Android due to an integer underflow in the Qualcomm diag driver used on Nexus 5 and Nexus 7 (2013). A crafted app could exploit this to gain privileges or access sensitive data. Affected software is Android on Nexus devices prior to the 2...