30410 matches found
D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection
D-Tale prior to version 3.16.1 contains a remote code execution caused by the update-settings endpoint allowing updates to enablecustomfilters, letting attackers run malicious code on the server, exploit requires hosting D-Tale publicly. id: CVE-2024-55890 info: name: D-Tale = 3.16.0 - Pre-Auth R...
CVE-2025-31033
⚠️ CVE-2025-31033 - CSRF in WordPress Buddypress Humanity Plugin Exploit – CVE-2025-31033 form action="http://target.com/wp-admin/admin.php?page=bph-settings" me...
PT-2026-118264
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution...
PT-2026-118353
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...
ALSA-2026:86196 Important: golang security, bug fix, and enhancement update
The golang packages provide the Go programming language compiler. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http:...
ALSA-2026:86093 Important: golang security, bug fix, and enhancement update
The golang packages provide the Go programming language compiler. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http:...
ALSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension...
Important: go-toolset:rhel8 security, bug fix, and enhancement update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension...
CVE-2025-26264
CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary command...
CVE-2026-71204-PoC
CVE-2026-71204 — changedetection.io: Omitted Checkbox in /settings Save Silently Disables API Key Enforcement Product: dgtlmoon/changedetection.io — v0.55.7 Files: changedetectionio/blueprint/settings/init.py, changedetectionio/forms.py CWE: CWE-284 — Improper Access Control CVSS 3.1:...
packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219
This repository does not have a README...
packages_apps_Settings_AOSP10_r33_CVE-2020-0219
This repository does not have a README...
CVE-2021-46074
CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...
CVE-2022-43271
CVE-2022-43271 Stored Cross-Site Scripting XSS Product: Move CRM https://inhabit.com.au/Move-Real-Estate-CRM-Software Discovery date: 2/8/2022 Fix date: 4/8/2022 Affected Version: version 4, build 260 Fixed Version: version 4, build 261 Description: The vulnerability was discovered in the 'staff...
packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one
This repository does not have a README...
packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old
This repository does not have a README...
packages_apps_Settings_AOSP10_r33_CVE-2021-0506
This repository does not have a README...
CVE-2022-28598
ERPNext - 12.29.0 Stored cross-site scripting XSS vulnerability in the "lastknownversion" field found in the "My Setting" page in ERPNext 12.29.0 allows remote attackers to inject arbitrary web script or HTML via a crafted site name by doing an authenticated POST HTTP request to...
CVE-2026-108833
Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...