371 matches found
CVE-2023-1454-EXP
JeecgBoot SQL CVE-2023-1454 Exploit 1. Vulnerability Details jeecg-boot version 3.5.0 has an SQL injection vulnerability, which stems from a security issue in the file jmreport/qurestSql, leading to SQL injection via the parameter apiSelectId. 2. Usage python3 CVE-2023-1454.py optional arguments:...
CVE-2024-37742
Guide to Reproduce CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows...
Astra Linux – Vulnerability in JQuery
In jQuery, starting from version 1.12.0 and before 3.5.0, passing HTML from untrusted sources—even after sanitizing it—to one of jQuery’s DOM manipulation methods e.g., .html, .append, etc. may execute untrusted code. This issue has been fixed in jQuery 3.5.0...
Fedora 43 : rsync (2026-d6763b4c84)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d6763b4c84 advisory. New version 3.5.0. Includes fixes for following CVEs: CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789...
Fedora 44 : rsync (2026-bfae8723e2)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bfae8723e2 advisory. New version 3.5.0. Includes fixes for following CVEs: CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789...
CVE-2026-53798 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53798 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70458 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70458 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53794 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53794 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70456 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70456 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53783 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70452 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
PT-2026-71636
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A privilege confusion issue exists in the name-converter subprocess uid/gid mapping. Local attackers can cause transferred files to be owned by root by influencing the name-converter responses to retur...
Slackware Linux 15.0 / current rsync Vulnerability (SSA:2026-225-01)
The version of rsync installed on the remote host is prior to 3.5.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-225-01 advisory. New rsync packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...
CVE-2026-14831 Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass
The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place below-minimum bookings and complete underpriced orders...