CVE-2026-1856 Appointment Booking Calendar <= 1.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Booking Field Label

The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom booking field labels in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2010-1856

Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...

CVE-2005-1856

The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...

CVE-2025-1856

creationtimestamp| type| source ---|---|--- 2025-03-03 08:29:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6161 2025-03-03 10:01:09+00:00| published-proof-of-concept| Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXOMPOY24Pc 2025-03-03 11:21:38+00:00| seen|...

CVE-2025-1856

CVE-2025-1856 affects Codezips Gym Management System 1.0. The vulnerability is an SQL injection in the /dashboard/admin/gen_invoice.php file, triggered by manipulating the id parameter. It can be exploited remotely and is labeled critical by sources. Public disclosures exist. Remediation/patch de...

CVE-2025-1856 Codezips Gym Management System gen_invoice.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/geninvoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

openSUSE Security Advisory (SUSE-SU-2024:1856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : opencryptoki (RHSA-2024:1856)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1856 advisory. The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These...

CVE-2024-1856

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability...

CVE-2024-1856 Progress Telerik Reporting Remote Deserialization Vulnerability

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability...

CVE-2024-1856

CVE-2024-1856 affects Progress Telerik Reporting: an ObjectReader deserialization vulnerability in versions prior to 2024 Q1 (18.0.24.130) allows remote code execution. Exploitation conditions vary by advisory (ZDI notes may require authentication and/or user interaction). Remediation is to upgra...

CVE-2024-1856 Progress Telerik Reporting Remote Deserialization Vulnerability

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability...

Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2023-1856)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:1856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12: install-initrd-SLES / tftpboot-installation-SLED-12-SP5-x86_64 / etc (SUSE-SU-2023:1856-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1856-1 advisory. This update provides updated tftboot-installation images, rebuilt with current shim and kernels. bsc1209014 bsc1198581...

CVE-2023-1856

creationtimestamp| type| source ---|---|--- 2023-04-05 12:27:54+00:00| seen| https://t.me/cibsecurity/61438...

CVE-2023-1856

CVE-2023-1856 affects SourceCodester Air Cargo Management System 1.0. The vulnerability lies in the GET Parameter Handler for /admin/transactions/track_shipment.php, where manipulating the id parameter leads to SQL injection. This can be triggered remotely and has been disclosed publicly. Connect...

SUSE CVE-2007-1856

Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service cron failure by creating hard links, which results in a failed stnlink check in database.c...

Amazon Linux 2 : xorg-x11-server (ALAS-2022-1856)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1856 advisory. A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length. CVE-2022-2319 A flaw was foun...

CVE-2022-1856

Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension or specific user interaction...