5 matches found
CVE-2025-15527
CVE-2025-15527 : WP Recipe Maker for WordPress is vulnerable to Information Exposure up to version 10.2.2 via api_get_post_summary, due to insufficient post-retrieval restrictions. Authenticated attackers with Contributor+ access can read data from posts they shouldn’t be able to edit or read, in...
EUVD-2024-19444
Malicious code in bioql PyPI...
RHEL 6 : openstack-glance (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openstack-glance: API v1 copyfrom reveals network details CVE-2017-7200 - A vulnerability was found in...
USN-5953-1 ipython vulnerabilities
It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request forgery CSRF attack and leak user's sensitive information. This issue only affected Ubuntu 14.04 ESM. CVE-2015-5607 It was discovered that IPython...
Informatica: [app.informaticaondemand.com] XXE
Request: POST /ma/api/v2/user/login HTTP/1.1 Host: app.informaticaondemand.com Content-Length: 285 Content-Type: application/xml Accept: application/xml %asd; %rrr; [email protected] Where xx.html: "%c; Then i got file /etc/passwd xxeapp.png...