RHSA-2026:1661 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

EUVD-2024-1661

Malicious code in bioql PyPI...

CVE-2024-1661

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

Exploit for Path Traversal in Pluginus Husky_-_Products_Filter_Professional_For_Woocommerce

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Fil...

CVE-2025-1661

creationtimestamp| type| source ---|---|--- 2025-03-11 04:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk3arnhszz2m 2025-03-11 05:36:15+00:00| published-proof-of-concept| Telegram/nGCSDP4vCltArA3VXeokA5jE1t269Apyi28mkZBPrFAwc4I 2025-03-11 05:48:30+00:00| seen|...

CVE-2025-1661

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

VulnCheck KEV: CVE-2025-1661

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2024-1661)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

CVE-2024-1661

creationtimestamp| type| source ---|---|--- 2024-02-20 14:21:55+00:00| seen| https://t.me/ctinow/188512 2024-02-20 14:26:20+00:00| seen| https://t.me/ctinow/188522 2024-02-21 13:23:19+00:00| seen| https://t.me/arpsyndicate/3763 2024-03-08 14:51:26+00:00| seen| https://t.me/ctinow/203352...

CVE-2024-1661

CVE-2024-1661 affects Totolink X6000R (v9.4.0cu.852_B20230719). A vulnerability in the file "/etc/shadow" allows hard-coded credentials, enabling a local-attack with high attack complexity and public disclosure of the exploit. No patch/version with a fix is provided in the sources. Connected PT-2...

CVE-2024-1661 Totolink X6000R shadow hard-coded credentials

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...

CVE-2023-1661 Display post meta, term meta, comment meta, and user meta <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2023-1661

CVE-2023-1661 affects the WordPress plugin Display post meta, term meta, comment meta, and user meta . It is a stored Cross-Site Scripting (XSS) vulnerability caused by insufficient input sanitization and output escaping in post metadata handling for versions up to and including 0.4.1. The issue ...

WordPress Display post meta, term meta, comment meta, and user meta Plugin <= 0.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Display post meta, term meta, comment meta, and user meta Type Plugin Vulnerable versions = 0.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1661 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

SUSE CVE-2007-1661

Perl-Compatible Regular Expression PCRE library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service crash, as demonstrated by the "\X?\d...

Amazon Linux AMI : postgresql96 (ALAS-2023-1661)

The version of postgresql96 installed on the remote host is prior to 9.6.24-1.86. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1661 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...

CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl

Security Advisory ID : BSA-2022-1661 Component : OpenSSL Revision : 1.0 A flaw was found in the way OpenSSL verified certificates via the X509verifycert function. X509verifycert fuunction may return a negative return value to indicate an internal error for example, out of memory. Such a negative...

CVE-2022-1661

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

CVE-2022-1661

The CVE-2022-1661 vulnerability affects Keysight N6854A Geolocation Server and N6841A RF Sensor software. It is a directory traversal flaw in the UserFirmwareRequestHandler class that can allow an attacker to read arbitrary OS files via crafted HTTP requests. Affected versions are 2.3.0 and earli...