104 matches found
CVE-2026-2691
creationtimestamp| type| source ---|---|--- 2026-02-20 05:00:19+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbda45gvm22...
CVE-2026-2691 itsourcecode Event Management System manage_register.php sql injection
A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/manageregister.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
EUVD-2011-0764
Malware in sbrugna...
CVE-2023-2691
A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...
CVE-2011-2691 affecting package syslinux for versions less than 6.04-11
CVE-2011-2691 affecting package syslinux for versions less than 6.04-11. A patched version of the package is available...
CVE-2025-2691
Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...
Huawei EulerOS: Security Advisory for syslinux (EulerOS-SA-2024-2915)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for syslinux (EulerOS-SA-2024-2839)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-2691 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'events' shortcode in all versions up to, and including, 3.1.43 due to insufficient input sanitization and output escaping on use...
WordPress WP Event Manager Plugin <= 3.1.43 is vulnerable to Cross Site Scripting (XSS)
Software WP Event Manager Type Plugin Vulnerable versions = 3.1.43 Fixed in 3.1.44 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2691 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 244e2b26df97 Credits Krzysztof Zając...
MSC-2024-2691
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...
CVE-2019-2691
creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5990...
BELL-CVE-2011-2691 CVE-2011-2691 does not affect BellSoft software
Bulletin has no description...
CVE-2023-2691
creationtimestamp| type| source ---|---|--- 2023-05-14 12:28:36+00:00| seen| https://t.me/cibsecurity/64071...
CVE-2023-2691
SourceCodester Personnel Property Equipment System 1.0 is affected by a cross-site scripting vulnerability in the POST Parameter Handler (admin/add_item.php) where the item_name parameter can be manipulated to inject scripts. Exploitation is possible remotely, and public disclosures exist. Connec...
Debian: Security Advisory (DSA-2005-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K04246541: MySQL vulnerabilities CVE-2019-2689, CVE-2019-2691, CVE-2019-2693, CVE-2019-2694, and CVE-2019-2695
Security Advisory Description CVE-2019-2689 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...
SUSE CVE-2019-2691
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Roles. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
SUSE: Security Advisory (SUSE-SU-2022:2691-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...