25 matches found
CVE-2025-68979
Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Calendar Events: from n/a through = 3.5.9...
CVE-2025-68979
Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Calendar Events: from n/a through = 3.5.9...
PT-2025-53869
Name of the Vulnerable Software and Affected Versions SimpleCalendar versions through 3.5.9 Description An authorization bypass exists due to user-controlled key vulnerability in Google Calendar Events. This allows exploitation of incorrectly configured access control security levels...
CVE-2025-68979: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Calendar Events: from n/a through = 3.5.9...
EUVD-2018-17739
Malware in sbrugna...
EUVD-2025-10814
Malicious code in bioql PyPI...
CVE-2025-32077
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting XSS.This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43...
CVE-2025-32077
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting XSS.This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43...
CVE-2025-32077 XSSes in Extension:SimpleCalendar
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting XSS.This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43...
CVE-2025-32077 XSSes in Extension:SimpleCalendar
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting XSS.This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43...
CVE-2025-32077
CVE-2025-32077 describes an Improper Input Validation vulnerability in The Wikimedia Foundation MediaWiki Extension: SimpleCalendar, affecting versions 1.39 through 1.43 and enabling Cross-Site Scripting (XSS). The issue arises from input validation weaknesses in the extension, leading to potenti...
PT-2025-16141 · Mediawiki · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Extension:SimpleCalendar versions 1.39 through 1.43 Description: The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting XSS in the Mediawiki - Extension:SimpleCalendar. Recommendations:...
MediaWiki input validation error vulnerability
MediaWiki is a suite of free and freely available web-based Wiki engines from the Wikimedia USA Foundation. The product can be used to deploy in-house knowledge management and content management systems. MediaWiki - A security vulnerability exists in SimpleCalendar versions 1.39 through 1.43, whi...
Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)
A vulnerability exists in Albonico Simplecalendar. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Sql injection
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter...
CVE-2018-5974
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter...
CVE-2018-5974
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter...
CVE-2018-5974
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter...
CVE-2018-5974
CVE-2018-5974 affects Joomla SimpleCalendar (component) with version 3.1.9 and earlier. Root cause: SQL Injection via the catid array parameter (catid[0], etc.). Impact per sources: high/severe due to remote attacker capability, with network attack vector and no authentication required according ...
PT-2018-17260
Name of the Vulnerable Software and Affected Versions: SimpleCalendar version 3.1.9 Description: A SQL Injection issue exists in the SimpleCalendar component for Joomla, specifically via the catid array parameter. This allows for potential exploitation. Recommendations: For version 3.1.9, conside...