126 matches found
NetScout nGeniusONE cross-site scripting vulnerabilities
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350, which stems from a stored cross-site scripting attack that could result from certain POST paramete...
CVE-2025-3219
creationtimestamp| type| source ---|---|--- 2025-04-04 07:36:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10410 2025-04-04 09:12:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lly35wdeoo2i 2025-04-04 12:09:54+00:00| seen|...
CVE-2025-2493
creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7903 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:53+00:00| seen| https://t.me/cvedetector/20568 2025-03-18 16:13:23+00:0...
CVE-2024-13868
creationtimestamp| type| source ---|---|--- 2025-03-06 06:33:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6654 2025-03-06 09:39:53+00:00| seen| https://t.me/cvedetector/19689 2025-03-06 09:40:13+00:00| seen|...
CVE-2025-25947
creationtimestamp| type| source ---|---|--- 2025-02-20 01:27:51+00:00| seen| https://bsky.app/profile/will.willofmiletus.com/post/3lil5654vzc2d 2025-02-20 02:16:42+00:00| seen| https://t.me/cvedetector/18496...
GO-2024-3164 Mattermost fails to strip `embeds` from `metadata` when broadcasting `posted` events in github.com/mattermost/mattermost-server
Mattermost fails to strip embeds from metadata when broadcasting posted events in github.com/mattermost/mattermost-server...
CVE-2022-1234
creationtimestamp| type| source ---|---|--- 2024-10-03 20:48:05+00:00| seen| https://t.me/cvedetector/6921 2025-02-11 06:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyyo33ch22 2025-02-11 06:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyyp3p6e2m...
PT-2024-32335 · Mattermost +1 · Mattermost +1
Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.0 Mattermost versions 9.5.x through 9.5.8 Description: The issue arises from the failure to validate that the message of a permalink post is a string, allowing an attacker to send a non-string value as...
CVE-2024-39371 io_uring: check for non-NULL file pointer in io_file_can_poll()
In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possible to trigger a NULL pointer dereference off the forced async preparation path, if no file had been assigned. The trace leading to that...
CVE-2024-39371 io_uring: check for non-NULL file pointer in io_file_can_poll()
In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possible to trigger a NULL pointer dereference off the forced async preparation path, if no file had been assigned. The trace leading to that...
Security Updates Delivered with ASCG v3.0
Dear Brocade Customer: This Advisory aims to inform you of Brocade ASCG security updates in Brocade ASCG v3.0. Please review the recently posted security advisories listed here: Updated Security Advisories to show these are now addressed in Brocade ASCG v3.0 CVE-2018-25032...
Security updates provided in Brocade SANnav v2.2.2a and v2.3.0
Dear Brocade Customer: This Advisory aims to inform you of Brocade SANnav Security updates in Brocade SANnav v2.2.2a and v2.3.0. Please review the recently posted security advisories listed here: Updated Security Advisories https://support.broadcom.com/external/content/SecurityAdvisories/0/21225...
PT-2023-16732 · Snyk · Snyk Kubernetes Monitor
Name of the Vulnerable Software and Affected Versions: Snyk Kubernetes Monitor affected versions not specified Description: This issue can result in irrelevant data being posted to a Snyk Organization, potentially obfuscating other relevant security issues. It does not expose users to direct...
SUSE CVE-2018-16882
A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested=1 virtualization is enabled. In nestedgetvmcs12pages, in case of an error while processing posted interrupt address, it unmaps the 'pidescpage' without resetting 'pidesc' descript...
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action
The plugin does not sanitise and escape POSted parameters sent to the wpassetcleanupfetchactivepluginsicons AJAX action available to admin users, leading to a Reflected Cross-Site Scripting issue PoC...
CVE-2021-24842
The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts...
CVE-2021-24842: Missing Authorization
The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts...
PT-2021-22050
Name of the Vulnerable Software and Affected Versions: WP-T-Wap WordPress plugin versions up to and including 1.13.2 Description: The issue allows attackers to inject arbitrary web scripts via the posted parameter found in the /wap/writer.php file, enabling Reflected Cross-Site Scripting attacks...