330 matches found
CVE-2024-37743
A vulnerability in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to achieve arbitrary code execution via the Document Display Component . This issue is categorized as Improper Control of Generation of Code (CWE-94) . The vulnerability carries a CRITICAL base severity score of 9.8 . As a mi...
CVE-2025-6141
creationtimestamp| type| source ---|---|--- 2025-06-16 22:40:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18551 2025-06-16 23:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrr6l6qdwb2m 2026-02-12 11:00:00+00:00| seen|...
CVE-2024-39902
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to Tuleap Community Edition 15.10.99.128 and Tuleap Enterprise Edition 15.10-6 and 15.9-8, the checkbox "Apply same permissions to all sub-items of this folder" in the document manager permissio...
CVE-2020-12646
OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...
CVE-2025-3245
creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10436 2025-04-04 13:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicilhad2u 2025-04-04 16:20:54+00:00| seen|...
CVE-2025-3035
Mozilla Firefox (including Firefox-ESR ) is affected by a vulnerability where the document title of a previous tab leaks into an AI chatbot prompt. This occurs when a user interacts with the chatbot in one tab and subsequently activates it in another tab. This flaw affects versions prior to 137 ....
CISCO-SA-20180606-WAAS
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:40+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793510827434...
CVE-2024-52757
creationtimestamp| type| source ---|---|--- 2024-11-20 19:49:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113517013054987472 2024-11-20 22:07:09+00:00| seen| https://t.me/cvedetector/11660 2024-11-21 19:29:35+00:00| seen|...
XSS through document upload
This report is not public...
CGA-PQHX-2QG9-25VW
Bulletin has no description...
CVE-2024-33864
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...
CVE-2023-44391 Prevent unauthorized access to summary details in Discourse
Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hideuserprofilesfrompublic is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no know...
CVE-2021-37305
creationtimestamp| type| source ---|---|--- 2023-02-03 20:21:04+00:00| seen| https://t.me/cibsecurity/57484 2023-05-18 00:58:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37305.yaml 2025-11-01 21:02:24+00:00| seen|...
OpenEMR Access Control Error Vulnerability (CNVD-2023-40915)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in versions of OpenEMR prior to...
GHSA-R32W-V775-5952 Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
A Cross-site scripting XSS vulnerability in Document Library module before 6.0.98 from Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2021-3394
creationtimestamp| type| source ---|---|--- 2021-02-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49530 2021-02-09 18:40:35+00:00| seen| https://t.me/cibsecurity/23303...
Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Plantronics Hub SpokesUpdateService Privilege Escalation', 'Description' = %q The Plantronics Hub client application for Windows makes use of an...