CVE-2026-4007

creationtimestamp| type| source ---|---|--- 2026-03-12 08:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgtz4v6fcr27 2026-03-12 09:41:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgu4b7pk5b27 2026-04-02 23:20:09+00:00| seen|...

CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

CVE-2025-4007

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

CVE-2025-4007

creationtimestamp| type| source ---|---|--- 2025-04-26 19:32:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114405928041433671 2025-04-28 08:10:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13662 2025-04-28 09:40:56+00:00| seen|...

CVE-2024-4007

creationtimestamp| type| source ---|---|--- 2025-04-04 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctf2hhr23...

openSUSE: Security Advisory for bea (SUSE-SU-2024:4007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ABB Cylon Aspect 3.07.01 Hard-Coded Credentials

ABB Cylon Aspect 3.07.01 config.inc.php Hard-coded Credentials in phpMyAdmin Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.01 Summary: ASPECT is an award-winning scalable building energy...

ABB Cylon Aspect 3.07.01 (config.inc.php) Hard-coded Credentials in phpMyAdmin

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller is operating with default and hard-coded...

CVE-2024-4007 Hard coded default credential contained in install package

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...

CVE-2024-4007 Hard coded default credential contained in install package

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...

CVE-2024-4007

ABB ASPECT, NEXUS Series, and MATRIX Series (firmware up to 3.07) contain default/hard-coded credentials installed with the package, enabling login to misconfigured devices. Root cause: credentials embedded in the installer; attack surface includes Internet-adjacent exposure per public advisories...

Malicious code in wlwz-2312-4007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1012ed29c688b8a597368227f0b63126a05b4afd997537940bd02d98501fa51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Royal Elementor Addons RCE

Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin use exploit/multi/http/wp/royalelementoraddonsrce msf undefinedroyalelementoraddonsrce show actions ...actions... msf undefinedroyalelementoraddonsrce set ACTION msf...

CVE-2023-4007

creationtimestamp| type| source ---|---|--- 2023-07-31 07:37:21+00:00| seen| https://t.me/cibsecurity/67425...

CVE-2023-4007 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16...

CVE-2023-4007

CVE-2023-4007 is a stored XSS vulnerability in phpMyFAQ. Affected software: phpMyFAQ prior to version 3.1.16 (Thorsten Rinne’s project). The root cause: stored input may be injected, leading to cross-site script execution. Impact indicators in public documents show high confidentiality/integrity ...

CVE-2023-4007 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16...

Security Bulletin: Vulnerability in IBM Advanced Management Module (CVE-2013-4007)

Summary Cross-Site Scripting XSS vulnerability is found in advsw.php page of IBM advanced Management Module. Vulnerability Details Abstract Cross-Site Scripting XSS vulnerability is found in advsw.php page of IBM advanced Management Module. Vulnerabily Details:| CVE ID: CVE-2013-4007 Description:...

CVE-2022-4007

creationtimestamp| type| source ---|---|--- 2023-03-09 02:23:32+00:00| seen| https://t.me/cibsecurity/59710...

CVE-2022-4007

GitLab CE/EE: A cross-site scripting (XSS) vulnerability in the title field of work items affects all versions from 15.3 up to, but not including, 15.7.8; 15.8 up to, but not including, 15.8.4; and 15.9 up to, but not including, 15.9.2. The issue allows attackers to perform arbitrary actions on b...