330 matches found
CVE-2024-37743
CVE-2024-37743 affects mmzdev KnowledgeGPT v0.0.5, where the Document Display Component allows a remote attacker to execute arbitrary code. The issue originates in the component handling document rendering, enabling code execution with network access and no user interaction. The CVSS v3.1 base sc...
CVE-2025-6141
creationtimestamp| type| source ---|---|--- 2025-06-16 22:40:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18551 2025-06-16 23:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrr6l6qdwb2m 2026-02-12 11:00:00+00:00| seen|...
CVE-2024-39902
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to Tuleap Community Edition 15.10.99.128 and Tuleap Enterprise Edition 15.10-6 and 15.9-8, the checkbox "Apply same permissions to all sub-items of this folder" in the document manager permissio...
CVE-2020-12646
OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...
CVE-2025-3245
creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10436 2025-04-04 13:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicilhad2u 2025-04-04 16:20:54+00:00| seen|...
CVE-2025-3035
Mozilla Firefox vulnerability CVE-2025-3035 affects Firefox versions earlier than 137.0. When a user opens an AI chatbot in one tab and later activates it in another, the document title from the previous tab can leak into the chat prompt. The available connected sources confirm the affected produ...
CISCO-SA-20180606-WAAS
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:40+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793510827434...
CVE-2024-52757
creationtimestamp| type| source ---|---|--- 2024-11-20 19:49:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113517013054987472 2024-11-20 22:07:09+00:00| seen| https://t.me/cvedetector/11660 2024-11-21 19:29:35+00:00| seen|...
XSS through document upload
This report is not public...
CGA-PQHX-2QG9-25VW
Bulletin has no description...
CVE-2024-33864
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...
CVE-2023-44391 Prevent unauthorized access to summary details in Discourse
Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hideuserprofilesfrompublic is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no know...
CVE-2021-37305
creationtimestamp| type| source ---|---|--- 2023-02-03 20:21:04+00:00| seen| https://t.me/cibsecurity/57484 2023-05-18 00:58:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37305.yaml 2025-11-01 21:02:24+00:00| seen|...
OpenEMR Access Control Error Vulnerability (CNVD-2023-40915)
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in versions of OpenEMR prior to...
GHSA-R32W-V775-5952 Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
A Cross-site scripting XSS vulnerability in Document Library module before 6.0.98 from Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2021-3394
creationtimestamp| type| source ---|---|--- 2021-02-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49530 2021-02-09 18:40:35+00:00| seen| https://t.me/cibsecurity/23303...
Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Plantronics Hub SpokesUpdateService Privilege Escalation', 'Description' = %q The Plantronics Hub client application for Windows makes use of an...