CVE-2026-4112

creationtimestamp| type| source ---|---|--- 2026-04-08 21:00:04+00:00| published-proof-of-concept| Telegram/jQQxeN2mPQPtfMYoTo2hQ-smSd26JApgUtHwY05JTWW84 2026-04-09 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tufseft2h 2026-04-09 16:28:08+00:00| seen|...

CVE-2025-20734

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-411...

CVE-2012-4112

The Baseboard Management Controller BMC in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted command parameters within the command-line interface, aka Bug ID CSCtr43330...

CVE-2025-4112

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14003 2025-04-30 13:31:04+00:00| published-proof-of-concept| Telegram/ZMJS5w1XZ2iVn41-DRp0jBJzL5A1-4Dr49XSwoANaTKxMXI 2025-04-30 13:55:30+00:00| seen|...

CVE-2025-4112 PHPGurukul Student Record System add-course.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manipulation of the argument course-short leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4112 PHPGurukul Student Record System add-course.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manipulation of the argument course-short leads to sql injection. The attack can be initiated remotely. The exploit has be...

Debian dla-4112 : php-horde-editor - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4112 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4112-1 [email protected] https://www.debian.org/lts/security/...

RHEL 8 : Red Hat Ansible Automation Platform 2.0 ansible-runner (RHSA-2022:0474)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0474 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

RHEL 8 : Red Hat Ansible Automation Platform 2.1 ansible-runner (RHSA-2022:0460)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0460 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS

Exploit Title: PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Version: 1.0 Tested on: Windows 10 Pro Impact:...

CVE-2023-4112 PHP Jabbers Shuttle Booking Software index.php cross site scripting

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2023-4112

PHP Jabbers Shuttle Booking Software 1.0 contains a Cross-Site Scripting (XSS) flaw in /index.php. The Nuclei template and ExploitDB entry describe an attacker sending a malicious URL via email/IM to exploit RXSS and potentially steal session tokens or credentials. Root cause: insufficient saniti...

CVE-2022-4112

The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4112 Quizlord <= 2.0 - Admin+ Stored XSS

The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4112

The CVE-2022-4112 case concerns the Quizlord WordPress plugin (versions through 2.0). Affected component: plugin settings not sanitised/escaped, enabling Stored XSS by high-privilege users (e.g., admin) even when unfiltered_html is disallowed (multisite). Impact is described as admin-level XSS wi...

SUSE SLES12: kernel-livepatch-4_12_14-150100_197_111-default / etc (SUSE-SU-2022:4112-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4112-1 advisory. This update for the Linux Kernel 4.12.14-122103 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixe...

CVE-2021-4112

creationtimestamp| type| source ---|---|--- 2022-08-26 00:24:19+00:00| seen| https://t.me/cibsecurity/48826...

CVE-2021-4112

CVE-2021-4112 affects Red Hat Ansible Automation Platform (ansible-runner). The issue is described as a privilege escalation via job isolation escape that could elevate a low-privilege user to an AWX user from outside the isolated environment. Public details in connected documents identify the vu...

CVE-2023-4112

creationtimestamp| type| source ---|---|--- 2022-06-27 15:31:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2581 2023-08-03 12:40:13+00:00| seen| https://t.me/cibsecurity/67644...

Important: Red Hat Security Advisory: Red Hat Ansible Ansible Tower 3.8 security update

An update is now available for Red Hat Ansible Tower 3.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...