70 matches found
CVE-2025-4092 vulnerabilities
Vulnerabilities for packages: firefox...
Exploit for CVE-2026-4092
No d...
@battis/gas-lighter (>=0.2.0 <=0.5.2), @ciderjs/dgs (>=0.1.0 <=0.1.1) +11 more potentially affected by CVE-2026-4092 via @google/clasp (>=1.5.3 <=3.1.3)
@google/clasp NPM version =1.5.3, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =0.0.2, =2.0.5, =1.0.0, =3.1.1, =0.1.0, =0.0.1, =2.0.0, =4.0.0 Source cves: CVE-2026-4092 Source advisory: OSV:GHSA-HQJG-PWW4-PCGQ...
CVE-2026-4092 Arbitrary File Write via Path Traversal in Google clasp leading to RCE
Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...
multi-clasp2 (=4.0.0) potentially affected by CVE-2026-4092 via @google/clasp (=3.1.3)
@google/clasp NPM version =3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @google/clasp and may be impacted: - multi-clasp2 =4.0.0 Source cves: CVE-2026-4092 Source advisory: SNYK:JS-GOOGLECLASP-15248426...
EUVD-2026-4092
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ovatheme Athens athens allows PHP Local File Inclusion.This issue affects Athens: from n/a through = 1.1.6...
EUVD-2019-4092
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2022-4092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to...
RHSA-2024:4092
creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:11+00:00| seen| Telegram/xz2mmH5nmIWrLJp0VXaeukJpqyU7ikcVL-1Te4VH0IBdQ0 2025-08-03 06:50:40+00:00| seen| Telegram/kR0M1VfOWtTJanh-8ZUzu0Y5NJjZYBx0dZa5c6WLbE9rw4...
CVE-2024-4092
The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ parameter in all versions up to, and including, 6.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web...
CVE-2025-4092
creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33yf652b 2025-04-29 16:49:36+00:00| seen| https://t.me/cvedetector/23994 2025-04-30 21:31:42+00:00| seen|...
CVE-2025-4092
Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138...
CVE-2024-4092
CVE-2024-4092 affects Slider Revolution (revslider) for WordPress. It is a Stored XSS via the htmltag parameter in all versions up to 6.7.7. Exploitation is possible by authenticated users (administrators; authors if enabled) and can affect pages viewed by other users. The CVE entry is marked as ...
CVE-2024-4092
The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ parameter in all versions up to, and including, 6.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web...
WordPress Slider Revolution Plugin <= 6.7.7 is vulnerable to Cross Site Scripting (XSS)
Software Slider Revolution Type Plugin Vulnerable versions = 6.7.7 Fixed in 6.7.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4092 Patch priority Low CVSS severity Low 6.5 Developer ThemePunch PSID 82a59957f3ec Credits wesley wcraft Required...
CVE-2023-4092
creationtimestamp| type| source ---|---|--- 2023-09-19 16:29:22+00:00| seen| https://t.me/cibsecurity/70715...
CVE-2023-4092
SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data insert/update/delete, perform database administration operations and, in some cases, execute commands on the...
CVE-2023-4092 SQL injection vulnerability in Fujitsu Arconte Áurea
SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data insert/update/delete, perform database administration operations and, in some cases, execute commands on the...
CVE-2023-4092 SQL injection vulnerability in Fujitsu Arconte Áurea
SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data insert/update/delete, perform database administration operations and, in some cases, execute commands on the...
