CVE-2023-4592

creationtimestamp| type| source ---|---|--- 2023-11-03 15:23:21+00:00| seen| https://t.me/cibsecurity/73516...

CVE-2023-4592

CVE-2023-4592 concerns WPN-XM Serverstack 0.8.6. The vulnerability is a Cross-Site Scripting flaw allowing a remote attacker to send a crafted JavaScript payload via the "/tools/webinterface/index.php" parameter to access an authenticated user’s cookie/session information, enabling session hijack...

CVE-2023-4592 Improper Neutralization of Input During Web Page Generation in WPN-XM Serverstack

A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload through the /tools/webinterface/index.php parameter and retrieve the cookie session details of an...

CVE-2018-4592

creationtimestamp| type| source ---|---|--- 2023-09-14 22:43:54+00:00| seen| https://t.me/cibsecurity/70548...

CVE-2018-4592

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4592

A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is...

CVE-2022-4592 luckyshot CRMx index.php commentdelete sql injection

A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is...

CVE-2022-4592

CVE-2022-4592 affects luckyshot CRMx, specifically the index.php functions get/save/delete/comment/commentdelete, where an SQL injection is caused by improper handling. The vulnerability can be exploited remotely and has been described as critical. A patch is available under the patch name “8c62d...

AlmaLinux 9 : rsync (ALSA-2022:4592)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4592 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. T...

RHEL 9 : rsync (RHSA-2022:4592)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4592 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

Oracle Linux 8 : gcc-toolset-10-annobin (ELSA-2021-4592)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4592 advisory. 9.29-1.2 - Bump and rebuild for new gcc. 2017782 9.29-1.1 - Annocheck: Add test for multibyte characters in symbol names. 2009282 Tenable has extracted the...

CentOS 8 : gcc-toolset-10-annobin (CESA-2021:4592)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4592 advisory. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 Note that Nessus has not tested for thi...

RHEL 8 : gcc-toolset-10-annobin (RHSA-2021:4592)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4592 advisory. Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's...

SUSE: Security Advisory (SUSE-SU-2014:0189-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM MQ could allow an authenticated user, under nondefault configuration, to cause a data corruption attack due to an error when using segmented messages. (CVE-2020-4592)

Summary An issue was found within the MQ queue manager message processing logic that could allow an attacker to cause corrupt data when using segmented messages with a queue manager that is configured to use Linear Logging. Vulnerability Details CVEID: CVE-2020-4592 DESCRIPTION: IBM MQ could allo...

Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4592

Summary IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4592 Vulnerability Details CVEID: CVE-2020-4592 DESCRIPTION: IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using...

CVE-2020-4592

creationtimestamp| type| source ---|---|--- 2020-11-18 20:40:41+00:00| seen| https://t.me/cibsecurity/16528...

CVE-2020-4592

IBM MQ vulnerability CVE-2020-4592 affects IBM MQ Appliance and related MQ offerings. A data corruption issue can be triggered by an authenticated user under nondefault configuration due to an error in the segmented messages handling in the queue manager processing logic. Affected products includ...

Security Bulletin: IBM MQ Appliance is affected by a data corruption vulnerability (CVE-2020-4592)

Summary IBM MQ Appliance has addressed a data corruption vulnerability. Vulnerability Details CVEID: CVE-2020-4592 DESCRIPTION: IBM MQ could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages. CVSS Base score...