51 matches found
teamspeak3-vulnerabilities
TeamSpeak 3 서버 - 개념 증명 익스플로잇 이 저장소에는 TeamSpeak 3 서버3.13.7에서 발견된 세 가지 취약점CVE-2026-4390, CVE-2026-4391 및 CVE-2026-4392에 대한 개념 증명 코드가 포함되어 있습니다. 모든 발견 사항은 TeamSpeak에 책임감 있게 공개되었으며, 당사의 보안 권고에 게시되었습니다. 힙 use-after-free 취약점CVE-2026-4390에 대한 자세한 기술 문서는 제 블로그 게시물을 참조하십시오. 면책 조항 이 코드는 교육 및 연구 목적으로만 제공됩니다...
CVE-2026-4391
creationtimestamp| type| source ---|---|--- 2026-05-27 20:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmud65vf7g2q...
EUVD-2026-4391
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3reconfigure In smb3reconfigure, if smb3syncsessionctxpasswords fails, the function returns immediately without freeing and erasing the newly allocated newpassword and newpassword2. Thi...
Debian dla-4391 : python3-mistralclient - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4391 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4391-1 [email protected] https://www.debian.org/lts/security/...
CVE-2022-4391
The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2025-4391
The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echogeneratefeaturedimage function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files...
CVE-2025-4391
creationtimestamp| type| source ---|---|--- 2025-05-17 06:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv3cpri2p 2025-05-17 17:01:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezaisxuej2...
CVE-2025-4391
The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echogeneratefeaturedimage function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files...
CVE-2025-4391
The CVE-2025-4391 in Echo RSS Feed Post Generator for WordPress is a result of missing file type validation in the echo_generate_featured_image() function across all versions up to 5.4.8.1, enabling unauthenticated arbitrary file uploads and potentially remote code execution. Connected sources co...
WordPress Echo RSS Feed Post Generator plugin <= 5.4.8.1 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Foxyyy in WordPress Plugin Echo RSS Feed Post Generator Plugin for WordPress versions = 5.4.8.1...
CVE-2024-4391 Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Event Calendar widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-4391 Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Event Calendar widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2022-4391
The Vision Interactive For WordPress plugin (versions ≤ 1.5.3) contains a Stored XSS risk due to inadequate sanitization/escaping of some settings, allowing low-privilege users (e.g., Contributor+) to inject scripts even when unfiltered_html is disallowed. The issue is documented across multiple ...
CVE-2022-4391 Vision Interactive For WordPress <= 1.5.3 - Contributor+ Stored XSS
The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2018-4391
CVE-2018-4391 describes an inconsistent user-interface issue where processing a maliciously crafted text message may lead to UI spoofing due to improper state management. Apple fixes released in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, Security Update 2017-004 El Capitan, watch...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4391-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4391-1 advisory. It was discovered that the ext4 file system implementation in the Linux kernel did not properly handle setxattr operations in some situations. A local...
CVE-2019-4391
HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...
CVE-2019-4391
CVE-2019-4391 concerns HCL AppScan Standard being vulnerable to XML External Entity (XXE) injection while processing XML data. The CVSSv3.1 base score is 8.2 (HIGH) with network attack vector, no privileges required, no user interaction, and a confidentiality impact of HIGH, availability impact L...
Debian DSA-4391-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4391. The text...
Debian: Security Advisory (DSA-4391-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...