CVE-2026-4094

creationtimestamp| type| source ---|---|--- 2026-05-15 07:33:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlusxccsji2q...

EUVD-2026-4094

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Depot depot allows PHP Local File Inclusion.This issue affects Depot: from n/a through = 1.16...

CVE-2011-4094

Jara 1.6 has a SQL injection vulnerability...

WordPress Digits plugin < 8.4.6.1 - Auth Bypass via OTP Bruteforcing vulnerability

Auth Bypass via OTP Bruteforcing vulnerability discovered by Saleh Tarawneh in WordPress Plugin Digits versions 8.4.6.1...

CVE-2025-4094

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them...

CVE-2025-4094

CVE-2025-4094 affects the Digits WordPress plugin: versions prior to 8.4.6.1 do not rate-limit OTP validation attempts, enabling brute-force attacks that can bypass authentication. Public disclosures and PoCs describe OTP brute-forcing across forgot-password and OTP validation endpoints, with exp...

Exploit for CVE-2025-4094

WordPress Plugin Digits OTP Bypass CVE-2025-4094 Overvie...

CVE-2025-4094

creationtimestamp| type| source ---|---|--- 2025-05-15 04:50:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36841 2025-05-15 13:17:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36884 2025-05-21 22:41:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17207...

Debian: Security Advisory (DLA-4094-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4094

creationtimestamp| type| source ---|---|--- 2025-03-18 20:48:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8005...

CVE-2024-4094 Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2022-4094

Technical details for CVE-2022-4094 are not publicly available in the provided documents; no affected products, impact, or remediation are described. Monitor for updates.

K000138651: c-ares vulnerability CVE-2022-4904

Security Advisory Description A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrit...

CVE-2023-4094

creationtimestamp| type| source ---|---|--- 2023-09-19 18:29:30+00:00| seen| https://t.me/cibsecurity/70729...

CVE-2023-4094 Weak authentication vulnerability in Fujitsu Arconte Áurea

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the...

CVE-2023-4094

ARCONTE Aurea Arconte Áurea 1.5.0.0 has a weak authentication vulnerability that lets an attacker issue false login attempts to block legitimate accounts and cause a denial of service. A separate resource indicates a method to circumvent the login attempt limit. Public documents identify the affe...

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation via loading libraries from an untrusted path (CVE-2019-4094).

Summary Db2 binaries load shared libraries from an untrusted path, potentially giving low privileged local user root access. Vulnerability Details CVEID: CVE-2019-4094 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server binaries load shared libraries from an untrusted pat...

CVE-2011-4094

creationtimestamp| type| source ---|---|--- 2020-01-21 18:44:22+00:00| seen| https://t.me/cibsecurity/9319...

CVE-2011-4094

CVE-2011-4094 concerns a SQL injection vulnerability in Jara 1.6. Publicly linked documents identify the affected product as Jara 1.6 and classify the issue as SQL injection, with CVSS metrics indicating high severity (CVSSv2 base score 7.5; CVSSv3.1 base score 9.8) and a network-adjacent, low-at...

CVE-2011-4094

Jara 1.6 has a SQL injection vulnerability...