21739 matches found
CVE-2025-1335
CmsEasy 7.7.7.9 contains a path traversal vulnerability in the deleteimg_action function of lib/admin/file_admin.php. Manipulating the imgname parameter enables traversal, and the issue is remotely exploitable with disclosure of the exploit. Multiple sources confirm the affected component and nat...
CVE-2024-57778
An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
UBUNTU-CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
PT-2025-6546 · WordPress · Team Members Showcase Plugin
Name of the Vulnerable Software and Affected Versions: The Team – Team Members Showcase Plugin plugin for WordPress versions up to, and including, 4.4.9 Description: The issue is related to unauthorized access due to a missing capability check on the response function. This allows authenticated...
CVE-2025-24567
creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2l3yhe2i 2025-02-14 15:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/114002987054618420 2025-02-14 15:45:42+00:00| seen|...
OESA-2025-1119 cpp-httplib security update
A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters "\r\n" when those are prefixed with a null byte. This enables...
OESA-2025-1118 cpp-httplib security update
A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters "\r\n" when those are prefixed with a null byte. This enables...
SUSE CVE-2024-10491
A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...
SUSE CVE-2024-47401
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
WordPress Bit Assist plugin <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function vulnerability
Path Traversal to Authenticated Administrator+ Arbitrary File Read via downloadResponseFile Function vulnerability discovered by koffee in WordPress Plugin Bit Assist versions = 1.5.2...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2024-57778
CVE-2024-57778 affects the Orbe ONetView Onet-1200 router. The issue allows a remote attacker to escalate privileges by exploiting a server response flow that changes from HTTP 500 to HTTP 200. Documents consistently describe the affected device as Orbe ONetView Roeador Onet-1200/Onet-1200 and in...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
PT-2025-6611 · WordPress · Bit Assist
Name of the Vulnerable Software and Affected Versions: Bit Assist plugin for WordPress versions up to, and including, 1.5.2 Description: The issue allows authenticated attackers with Administrator-level access and above to read the contents of arbitrary files on the server, which can contain...
Orbe ONetView Roteador Onet-1200 安全漏洞
Orbe ONetView Roteador Onet-1200 is a router from Orbe Brazil. A security vulnerability exists in the Orbe ONetView Roteador Onet-1200 that originates from a remote attacker being able to elevate privileges from status code 500 to status code 200 via a server response...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2025-26819
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections...
CVE-2023-37482
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames...