94 matches found
MINI-35VP-4489-FXPF
Bulletin has no description...
CVE-2026-4489
creationtimestamp| type| source ---|---|--- 2026-03-20 18:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj5tes2kl24...
CVE-2026-4489
A vulnerability was detected in Tenda A18 Pro 02.03.02.28. This vulnerability affects the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...
Debian dla-4489 : libvpx-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4489 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4489-1 [email protected] https://www.debian.org/lts/security/...
DLA-4489-1 libvpx - security update
Bulletin has no description...
CVE-2017-4489
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
EUVD-2026-4489
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on...
CVE-2025-4489
A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...
CVE-2025-4489
A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...
CVE-2025-4489 Campcodes Online Food Ordering System user-router.php sql injection
A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...
CVE-2025-4489 Campcodes Online Food Ordering System user-router.php sql injection
A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...
CVE-2025-4489
CVE-2025-4489 affects Campcodes Online Food Ordering System 1.0. A vulnerability exists in the file /routers/user-router.php where manipulation of the t1_verified argument enables SQL injection. The issue is exploitable remotely and, per sources, the exploit has been disclosed publicly. Multiple ...
Linux Distros Unpatched Vulnerability : CVE-2016-4489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the gnuspecial function in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary,...
Linux Distros Unpatched Vulnerability : CVE-2010-4489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service out-of-bounds read via a...
CVE-2024-4489 Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customuploadmimes’ function in versions up to, and including, 1.3.976 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
WordPress Royal Elementor Addons Plugin <= 1.3.976 is vulnerable to Cross Site Scripting (XSS)
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.976 Fixed in 1.3.977 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4489 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID bfd32dc437a7 Credits wesley wcraft Require...
RHEL 6 : gcc (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gcc: Exploitable buffer overflow CVE-2016-2226 - Use-after-free vulnerability in libiberty allows remote...
CVE-2023-4489
creationtimestamp| type| source ---|---|--- 2024-01-11 10:56:59+00:00| seen| https://t.me/ctinow/166444 2025-05-21 14:43:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17121...
CVE-2023-4489
The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access...
CVE-2023-4489
The CVE affects Silicon Labs Z/IP Gateway SDK-based Z/IP Gateway products, specifically versions prior to 7.18.3. The first S0 encryption key is generated using an uninitialized PRNG at startup, making it predictable and enabling potential network key prediction and unauthorized S0 network access...