CVE-2026-4434

creationtimestamp| type| source ---|---|--- 2026-03-20 15:51:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiuojen7q2y...

CVE-2026-4434

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...

GO-2026-4434 EVE Seals Vault Key With SHA1 PCRs in github.com/lf-edge/eve

EVE Seals Vault Key With SHA1 PCRs in github.com/lf-edge/eve...

MiracleLinux 8 : redis:6 (AXSA:2022-4434:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4434:01 advisory. redis: Code injection via Lua script execution environment CVE-2022-24735 redis: Malformed Lua script can crash Redis CVE-2022-24736 Tenable has...

CVE-2023-4434

Missing Authorization in GitHub repository hamza417/inure prior to build88...

EUVD-2016-4434

Malware in sbrugna...

CVE-2011-4434

Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a 1 macro or 2 scripting feature in an application, as demonstrated by Microsoft Office applications and the...

CVE-2025-4434

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15655 2025-05-09 06:10:39+00:00| seen| https://t.me/cvedetector/24899 2025-05-09 06:17:51+00:00| seen|...

CVE-2025-4434

...

CVE-2025-4434

The CVE-2025-4434 entry corresponds to a vulnerability in the WordPress Remote Images Grabber plugin. Affected component: the Remote Images Grabber plugin for WordPress (versions up to 0.6). Root cause: insufficient input sanitization and output escaping, leading to a Reflected Cross-Site Scripti...

CVE-2024-4434 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘termid’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2024-4434 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘termid’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to SQL Injection

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-4434 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 919e5a96b8fa Credits 1337Wannabe Required privilege Unauthenticated...

CVE-2021-4434

creationtimestamp| type| source ---|---|--- 2024-01-24 19:16:34+00:00| seen| https://t.me/ctinow/173005 2024-02-10 17:46:34+00:00| seen| https://t.me/ctinow/182617...

CVE-2021-4434

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swpurl' parameter. This allows attackers to execute code on the server...

CVE-2021-4434 Social Warfare <= 3.5.2 - Remote Code Execution

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swpurl' parameter. This allows attackers to execute code on the server...

CVE-2021-4434

CVE-2021-4434 affects the WordPress Social Warfare plugin (versions up to 3.5.2). The vulnerability is a Remote Code Execution via the swp_url parameter, allowing an attacker to execute code on the server. Root cause: improper handling of the swp_url input. Impact: high (remote code execution). A...

CVE-2023-4434 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build88...

CVE-2023-4434

CVE-2023-4434 refers to a missing authorization vulnerability in the Inure Android app (GitHub hamza417/inure) present in builds prior to build88. Red Hat and OSV/NVD entries corroborate the issue as ‘Missing Authorization in hamza417/inure prior to build88’. Technical detail from the Huntr entry...

CVE-2023-4434 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build88...