Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-4782

Malware in sbrugna...

5.8CVSS6.4AI score0.00243EPSS
Exploits1References2
NVD
NVD
added 2025/08/24 10:15 p.m.3 views

CVE-2025-9395

A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of the argument fileName leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be use...

6.5CVSS0.00065EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/08/24 10:2 p.m.8 views

CVE-2025-9395 wangsongyan wblog backup.go RestorePost server-side request forgery

A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of the argument fileName leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be use...

6.5CVSS0.00065EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/24 10:2 p.m.2 views

CVE-2025-9395 wangsongyan wblog backup.go RestorePost server-side request forgery

A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of the argument fileName leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be use...

6.5CVSS6.3AI score0.00065EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/24 12:0 a.m.3 views

PT-2025-34573 · Unknown · Wangsongyan Wblog

Name of the Vulnerable Software and Affected Versions: wangsongyan wblog version 0.0.1 Description: A vulnerability exists in the RestorePost function of the backup.go file, allowing for server-side request forgery SSRF through manipulation of the fileName argument. This issue is remotely...

6.5CVSS6.2AI score0.00065EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/08/24 12:0 a.m.1 views

wblog 代码问题漏洞

wblog is an application by OnTheRoad Personal Developer. A code issue vulnerability exists in wblog version 0.0.1, which stems from an incorrect manipulation of the parameter fileName by the RestorePost function in the backup.go file, resulting in a server-side request forgery...

6.5CVSS6.5AI score0.00065EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 1:39 a.m.9 views

CVE-2011-4865

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

5.8CVSS6.9AI score0.00243EPSS
Exploits1References1
seebug.org
seebug.org
added 2012/02/01 12:0 a.m.17 views

腾讯微博 for Android 权限许可和访问控制漏洞

CVE-2011-4865 Android是Google通过Open Handset Alliance发起的项目,用于为移动设备提供完整的软件集,包括操作系统、中间件等。 Android的Tencent WBlog com.tencent.WBlog3.3.1版本和MicroBlogPad1.4.0版本应用程序中存在漏洞,该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改短消息草稿箱和搜索关键词。 0 WBlog 3.3.1 MicroBlogPad 1.4.0 目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接:...

5.8CVSS6.7AI score0.00243EPSS
Exploits1
NVD
NVD
added 2012/01/25 4:3 a.m.6 views

CVE-2011-4865

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

5.8CVSS6.6AI score0.00243EPSS
Exploits1References1
Prion
Prion
added 2012/01/25 4:3 a.m.10 views

Code injection

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

5.8CVSS7.1AI score0.00243EPSS
Exploits1References1Affected Software2
CVE
CVE
added 2012/01/25 2:0 a.m.41 views

CVE-2011-4865

The CVE-2011-4865 issue affects Android apps Tencent WBlog 3.3.1 and MicroBlogPad 1.4.0, where data is not protected properly, allowing remote attackers to read or modify message drafts and search keywords via a crafted app. Root cause: insecure data protection within these apps. Impact is data e...

5.8CVSS6.7AI score0.00243EPSS
Exploits1References1Affected Software2
Rows per page
Query Builder