Lucene search
+L

91 matches found

OSV
OSV
•added 2026/06/18 2:51 p.m.•12 views

MINI-R35P-4589-RQWM

Bulletin has no description...

9.1CVSS6.1AI score0.00716EPSS
SaveExploits0
OSV
OSV
•added 2026/06/05 10:43 a.m.•16 views

MINI-4589-R9GV-246P

Bulletin has no description...

7.5CVSS6.1AI score0.0062EPSS
SaveExploits0
NVD
NVD
•added 2026/03/23 2:16 p.m.•16 views

CVE-2026-4589

A vulnerability was identified in kalcaddle kodbox 1.64. The affected element is the function PathDriverUrl of the file /workspace/source-code/app/controller/explorer/editor.class.php of the component fileGet Endpoint. Such manipulation of the argument path leads to server-side request forgery. T...

6.5CVSS0.00347EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/23 1:32 p.m.•6 views

CVE-2026-4589

A vulnerability was identified in kalcaddle kodbox 1.64. The affected element is the function PathDriverUrl of the file /workspace/source-code/app/controller/explorer/editor.class.php of the component fileGet Endpoint. Such manipulation of the argument path leads to server-side request forgery. T...

6.5CVSS6.4AI score0.00347EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
•added 2026/01/24 6:30 a.m.•16 views

EUVD-2026-4589

Not used...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:19 a.m.•15 views

CVE-2022-4589

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading ...

6.1CVSS6.9AI score0.00477EPSS
SaveExploits0References1
Circl
Circl
•added 2025/05/15 6:57 a.m.•37 views

CVE-2025-4589

creationtimestamp| type| source ---|---|--- 2025-05-15 06:57:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhrrbc2t 2025-05-15 14:35:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16510...

6.4CVSS7.8AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/15 4:16 a.m.•26 views

CVE-2025-4589

The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00241EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/15 3:21 a.m.•41 views

CVE-2025-4589 Bon Toolkit <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/15 3:21 a.m.•58 views

CVE-2025-4589

The Bon Toolkit WordPress plugin (versions up to 1.3.2) is vulnerable to Stored Cross-Site Scripting via the bt-map shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated access (contributor level or higher) and can inject scripts that execute wh...

6.4CVSS5.8AI score0.00241EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/05/14 9:21 p.m.•28 views

WordPress Bon Toolkit plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Chuck in WordPress Plugin Bon Toolkit versions = 1.3.2...

6.4CVSS6.3AI score0.00241EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/06/06 12:28 p.m.•21 views

CGA-MFM8-4589-WP7J

Bulletin has no description...

7.5CVSS7.2AI score0.01262EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/05/07 1:00 p.m.•24 views

CVE-2024-4589 DedeCMS mytag_edit.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/mytagedit.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed ...

5CVSS4.7AI score0.0042EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/03/14 12:00 a.m.•20 views

The vulnerability of the microprogrammed software of the wireless modems Hitron CODA-4582 and CODA-4589, related to insufficient entropy due to the default use of PSK, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogrammed wireless modems Hitron CODA-4582 and CODA-4589 relates to insufficient entropy due to the use of default PSKs which are generated from 5-digit hexadecimal values combined using the “Hitron” substring. Exploiting this vulnerability could allow an attacker t...

8.8CVSS5.5AI score0.00864EPSS
SaveExploits0References11
Prion
Prion
•added 2024/02/23 10:15 p.m.•26 views

Design/Logic Flaw

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy only about one million possibilities...

7.5AI score0.00864EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/02/23 12:00 a.m.•32 views

CVE-2024-25730

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy only about one million possibilities...

7AI score0.00864EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/02/23 12:00 a.m.•16 views

PT-2024-2064 · Hitron · Coda-4589 +1

Name of the Vulnerable Software and Affected Versions: Hitron CODA-4582 and CODA-4589 devices affected versions not specified Description: The issue is related to insufficient entropy due to the use of default PSKs, which are generated from 5-digit hex values concatenated with a "Hitron" substrin...

9.8CVSS6.9AI score0.00864EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•19 views

Hitron CODA-4582 and CODA-4589 Security Vulnerabilities

The Hitron Technologies CODA-4582 and Hitron Technologies CODA-4589 are demodulator routers from Hitron Technologies, a Chinese company. A security vulnerability exists in the Hitron CODA-4582 and CODA-4589 that stems from the devices having default PSKs that are generated by concatenating a...

9.8CVSS6.8AI score0.00864EPSS
SaveExploits0References8
CVE
CVE
•added 2024/02/23 12:00 a.m.•3972 views

CVE-2024-25730

The Hitron CODA-4582 and CODA-4589 wireless modems are vulnerable to a design flaw involving insufficient entropy in their default Pre-Shared Keys (PSKs). The devices generate these keys by concatenating a 5-digit hexadecimal value with the "Hitron" substring, limiting the total possibilities to ...

9.8CVSS6.8AI score0.00864EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2024/02/23 12:00 a.m.•38 views

CVE-2024-25730

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy only about one million possibilities...

6.9AI score0.00864EPSS
SaveExploits0References7
Rows per page
Query Builder