CVE-2026-4196

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function...

CVE-2026-4196

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function...

CVE-2026-4196 D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function...

CVE-2023-4196

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

EUVD-2025-4196

Malicious code in bioql PyPI...

CVE-2025-4196

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument compid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4196

creationtimestamp| type| source ---|---|--- 2025-05-02 02:18:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14422 2025-05-02 05:04:03+00:00| exploited| https://t.me/cvedetector/24301...

CVE-2025-4196

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument compid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4196 SourceCodester Patient Record Management System birthing.php sql injection

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument compid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4196 SourceCodester Patient Record Management System birthing.php sql injection

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument compid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4196

SourceCodester Patient Record Management System v1.0 contains a SQL injection in the /birthing.php handler triggered by manipulating the comp_id parameter. Affected component is the birthing.php file; root cause is unsanitized input leading to SQL injection. Impact is high/critical: potential rem...

CVE-2024-4196

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

CVE-2024-4196

creationtimestamp| type| source ---|---|--- 2024-06-28 16:04:42+00:00| seen| https://t.me/HackingInsights/4011...

CVE-2024-4196

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

CVE-2023-4196

creationtimestamp| type| source ---|---|--- 2023-08-06 22:12:36+00:00| seen| https://t.me/cibsecurity/67835...

CVE-2023-4196

CVE-2023-4196 affects Cockpit (cockpit-hq/cockpit) versions prior to 2.6.3. It is a stored XSS vulnerability where an attacker with permission to execute function assets can cause an XSS by uploading an HTML file, leading to code execution in the victim’s browser. The issue’s root cause is insuff...

CVE-2023-4196 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2022-4196

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:04+00:00| seen| https://t.me/cibsecurity/56192...

CVE-2022-4196 Multi Step Form < 1.7.8 - Admin+ Stored XSS

The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4196

The CVE-2022-4196 entry concerns the WordPress plugin Multi Step Form (versions before 1.7.8). The issue is that several form fields are not properly sanitised/escaped, allowing stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (e.g., in multisite setups)....