org.apache.camel:camel-example-cxf (2.7.5), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.8) +5 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.3.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.7.5 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (>=1.6.4, <=2.4.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.9) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.4, =2.4.0 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.6), org.apache.cxf.systests:cxf-systests-transports (2.3.6) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.3.6)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.6 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.4.0), org.apache.cxf.systests:cxf-systests-transport-jms (2.4.0) +5 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.4.0)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.4.0 -...

CVE-2025-53529

WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profilefuncionario.php endpoint. The idfuncionario parameter is not properly sanitized or validated before being used in a SQL query, allowing an unauthenticated attacker to...

CVE-2024-6398

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because oth...

WordPress Insert HTML Here plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Insert HTML Here versions = 1.0...

Exploit for CVE-2024-3673

CVE-2024-3673 CVE-2024-3673 Exploit: Local File Inclusion in W...

CVE-2024-6398

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because oth...

K000139692: Websense vulnerabilities CVE-2006-2035 and CVE-2010-5144

Security Advisory Description CVE-2006-2035 Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL. CVE-2010-5144 The ISAPI Filter plug-in in Websense Enterprise...

Mandiant Tracks Four Uncategorized Groups Exploiting Citrix Vulnerability

By Waqas Mandiant Investigates Zero-Day Exploitation in Citrix Vulnerability, CVE-2023-4966. This is a post from HackRead.com Read the original post: Mandiant Tracks Four Uncategorized Groups Exploiting Citrix Vulnerability...

org.apache.camel:camel-example-cxf (>=1.6.4, <=2.4.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.9) +6 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.2.9)

org.apache.cxf:cxf-rt-management MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.camel:camel-example-cxf =1.6.4, =2.4.0 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.4), org.apache.cxf.systests:cxf-systests-jaxws (2.3.4) +7 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.3.4)

org.apache.cxf:cxf-rt-management MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.4 - org.apache.cxf.systests:cxf-systests-jaxws...

Design/Logic Flaw

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035: Undefined Security Weakness

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...

CVE-2006-2035

The connected advisory confirms CVE-2006-2035 affects Websense when configured to permit the dynamic content category, enabling local users to bypass blocking of the Uncategorized category by appending a "/?" sequence to a URL. The CVSS data in the initial record indicates a low overall risk (AV:...

CVE-2006-2035

Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL...