36 matches found
CVE-2024-57677
An access control issue in the component form2Wan.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted POST request...
CVE-2025-20086
Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...
CVE-2025-20033
creationtimestamp| type| source ---|---|--- 2025-01-09 06:57:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113797093449395295 2025-01-09 07:00:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113797106872432045 2025-01-09 07:16:16+00:00| seen|...
CVE-2024-12471
CVE-2024-12471: Post Saint for WordPress (Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator) contains an authentication-required Arbitrary File Upload due to missing capability check and file-type validation on add_image_to_library. Affected versions inc...
CVE-2023-31073 WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields shortcode-to-display-post-and-user-data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and...
IrfanView Post-Release Reuse Vulnerability (CNVD-2024-47208)
IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute code in the context of the current process...
IrfanView Reuse After Release Vulnerability
IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute code in the context of the current process...
CVE-2024-0725
creationtimestamp| type| source ---|---|--- 2024-01-19 19:26:47+00:00| seen| https://t.me/ctinow/170356 2024-01-25 23:16:26+00:00| seen| https://t.me/ctinow/173859 2024-02-15 09:16:30+00:00| seen| https://t.me/ctinow/185348 2025-04-03 21:02:10+00:00| seen|...
EasyPX CMS 06.02.04 Cross Site Scripting
==================================================================================================================================== | Title : EasyPX CMS V06.02.04 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit | | Vend...
EUVD-2017-17363
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the POST parameters passed in this request to test if email credentials and hostname sent to the device work...
CVE-2019-3836
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...
CVE-2018-15899
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability...
CVE-2018-6644
SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...
Schoolhos CMS 2.29 - 'kelas' SQL Injection
Document Title: =============== Schoolhos CMS v2.29 - kelas Data Siswa SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1931 Release Date: ============= 2016-11-07 Vulnerability Laboratory ID VL-ID:...
iUSB 1.2 Arbitrary Code Execution
Document Title: =============== iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1374 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID: ==================================== 137...
