CVE-2026-4254

The CVE-2026-4254 entry affects Tenda AC8 firmware up to version 16.03.50.11. The vulnerability is in the HTTP Endpoint component, specifically the doSystemCmd function in /goform/SysToolChangePwd, where manipulating the local_2c argument triggers a stack-based buffer overflow. The issue can be e...

CVE-2026-4254

creationtimestamp| type| source ---|---|--- 2026-03-16 11:48:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116238692665148493 2026-03-17 03:02:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242288439153341 2026-03-21 09:40:09+00:00| seen|...

PT-2026-25746

Name of the Vulnerable Software and Affected Versions Tenda AC8 versions through 16.03.50.11 Description A weakness exists in the Tenda AC8. This issue affects the doSystemCmd function within the /goform/SysToolChangePwd file of the HTTP Endpoint component. Manipulation of the local 2c argument...

CGA-RMMG-VGRF-4254

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2025:4254-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2022-4254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sssd: libssscertmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Note that Nessus relies on the presence of the package as reported by...

CVE-2011-4254

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted RTSP SETUP request...

CVE-2025-4254

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LIST Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-4254 PCMan FTP Server LIST Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LIST Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2024-4254

The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code from a fork, which is unsafe as it...

openSUSE Security Advisory (SUSE-SU-2024:4254-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2024-2297)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-443M-H4WM-4254

Bulletin has no description...

CVE-2024-4254

CVE-2024-4254 — gradio-app/gradio : The main branch deploy-website.yml workflow is vulnerable to secrets exfiltration due to improper authorization. The workflow explicitly checks out and executes code from a fork, enabling untrusted code to run in an environment with push access to the base repo...

openSUSE: Security Advisory for sssd (SUSE-SU-2023:0204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K000136157: sssd vulnerability CVE-2022-4254

Security Advisory Description sssd: libssscertmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported releases for...

CVE-2023-4254

creationtimestamp| type| source ---|---|--- 2023-09-04 16:16:38+00:00| seen| https://t.me/cibsecurity/69791...

CVE-2023-4254 Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings

The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-4254

The CVE-2023-4254 entry concerns the AI ChatBot WordPress plugin prior to version 4.7.8, which fails to sanitise/escape certain settings, enabling Stored XSS by high-privilege users (e.g., Admin) even when unfiltered_html is disallowed (such as in multisite). Public details in connected documents...

WordPress ChatBot Plugin < 4.7.8 is vulnerable to Cross Site Scripting (XSS)

Software ChatBot Type Plugin Vulnerable versions 4.7.8 Fixed in 4.7.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4254 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c88c0ce63b6b Credits Bob Matyas Required privilege...