26734 matches found
GHSA-PWPM-X58V-PX5C
creationtimestamp| type| source ---|---|--- 2025-01-06 16:35:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113782380538487006...
CVE-2025-21611
CVE-2025-21611 affects tgstation-server (BYOND server management). Before version 6.12.3, the authorization check for API methods used OR between the user-enabled status and the role, instead of AND. This error allowed enabled users to access most authorized actions regardless of their permission...
CVE-2024-21464
creationtimestamp| type| source ---|---|--- 2025-01-06 10:41:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113780989472299366 2025-01-06 11:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzjcah72e 2025-01-06 11:48:26+00:00| seen|...
GHSA-6752-2M67-2M5V
creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/163...
GHSA-CQHV-985J-2FRF
creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/158...
GHSA-HJ25-CHFX-QMX5
creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/156...
GHSA-P22M-5PRX-9RM7
creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/155...
CVE-2024-20140
creationtimestamp| type| source ---|---|--- 2025-01-06 03:29:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113779288490361023 2025-01-06 03:32:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113779302282688630 2025-01-06 04:15:25+00:00| seen|...
CVE-2024-20143
creationtimestamp| type| source ---|---|--- 2025-01-06 03:29:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113779288504525189 2025-01-06 03:32:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113779302297257933 2025-01-06 04:15:28+00:00| seen|...
CVE-2024-13134
creationtimestamp| type| source ---|---|--- 2025-01-05 08:05:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113774711733188942 2025-01-05 08:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ley6ir3rdc2k 2025-01-05 08:37:34+00:00| seen|...
CVE-2025-0219
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
CVE-2025-0219 Trimble SPS851 Receiver Status Identity Tab cross site scripting
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
CVE-2025-0219
CVE-2025-0219 affects Trimble SPS851, version 488.01, specifically the Receiver Status Identity Tab. The vulnerability arises from improper handling of the System Name parameter, allowing cross-site scripting (XSS). The issue is exploitable remotely, and the public disclosure has occurred per the...
CVE-2024-13132
creationtimestamp| type| source ---|---|--- 2025-01-05 04:39:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113773900515803514 2025-01-05 06:38:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/120 2025-01-05 06:38:44+00:00| seen| https://t.me/cvedetector/14...
CVE-2025-0219: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...
PT-2025-3789 · Trimble · Trimble Sps851
Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue has been found in the Receiver Status Identity Tab component of the software, affecting some unknown functionality. The manipulation of the System Name argument leads to cross-sit...
CVE-2024-41767
creationtimestamp| type| source ---|---|--- 2025-01-04 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lewfixwisa2c 2025-01-04 16:30:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113771025764024151 2025-01-04 17:16:10+00:00| seen|...
CVE-2025-0210
creationtimestamp| type| source ---|---|--- 2025-01-04 14:07:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113770470686841476 2025-01-04 14:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lewc5xn34e22 2025-01-04 14:52:32+00:00| seen|...
CVE-2024-10957
creationtimestamp| type| source ---|---|--- 2025-01-04 13:41:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113770372050731497 2025-01-04 14:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lewc5uwjj22k 2025-01-04 14:52:30+00:00| seen|...
CVE-2025-0208
creationtimestamp| type| source ---|---|--- 2025-01-04 13:09:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113770243672441689 2025-01-04 13:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew6s52pkg2i 2025-01-04 13:47:29+00:00| seen|...