Tuleap 安全漏洞

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition prior to 16.4.99.1740498975 and Tuleap Enterprise Edition prior to 16.4-6, and prior to 16.3-11, which...

Linux Distros Unpatched Vulnerability : CVE-2017-7273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2019-15165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. CVE-2019-15165 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2014-0194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...

Linux Distros Unpatched Vulnerability : CVE-2020-12770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.6.11. sgwrite lacks an sgremoverequest call in a certain failure case, aka CID-83c6f2390040. CVE-2020-1277...

Linux Distros Unpatched Vulnerability : CVE-2016-10006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input a tag that supports style with active content, you could bypass the library protections...

CVE-2024-5888

creationtimestamp| type| source ---|---|--- 2025-03-03 23:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yia6kr2o 2025-03-03 23:56:23+00:00| seen| https://t.me/cvedetector/19417 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-1882

creationtimestamp| type| source ---|---|--- 2025-03-03 21:30:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6289 2025-03-03 21:46:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114100690253927235 2025-03-03 23:44:36+00:00| seen|...

CVE-2024-51091

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit77tpfr2i 2025-03-03 21:24:51+00:00| seen| https://t.me/cvedetector/19407 2025-03-04 16:31:44+00:00| published-proof-of-concept|...

CVE-2025-27420

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6229 2025-03-03 18:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7ip7v52a 2025-08-19 13:26:46+00:00| seen|...

CVE-2025-27419

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6228 2025-03-03 18:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hmlg52v 2025-03-03 19:44:23+00:00| seen| https://t.me/cvedetector/19391 2025-08-19...

GHSA-9RP6-4MQP-G4P8

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6228...

CVE-2025-27422 FACTION Allows Authentication Bypass via User Creation

FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules no missing information, secure...

CVE-2025-27498

creationtimestamp| type| source ---|---|--- 2025-03-03 16:06:57+00:00| published-proof-of-concept| https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886 2025-03-03 17:52:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114099772162398875 2025-03-03 19:43:59+00:00...

CVE-2018-8639

creationtimestamp| type| source ---|---|--- 2025-03-03 15:58:10+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/3472167 2025-03-03 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-03-03 19:03:10+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3ljinbdwlgm23...

CVE-2025-25109

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285514836470...

CVE-2025-26988

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6213 2025-03-03 15:48:56+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285836194894 2025-03-03 18:03:51+00:00| seen|...

CVE-2025-23731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Tax Report for WooCommerce tax-report-for-woocommerce allows Reflected XSS.This issue affects Tax Report for WooCommerce: from n/a through = 2.2...

CVE-2025-23731 WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Tax Report for WooCommerce tax-report-for-woocommerce allows Reflected XSS.This issue affects Tax Report for WooCommerce: from n/a through = 2.2...

CVE-2025-23731

CVE-2025-23731 : Reflected cross-site scripting in the WordPress plugin Tax Report for WooCommerce (infosoftplugin), affecting versions up to 2.2. Root cause: improper input neutralization during web page generation. Impact: allows attacker to inject scripts that may affect confidentiality, integ...