CVE-2026-4608

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:08+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mludokvtcu2l...

EUVD-2012-4608

Malware in sbrugna...

CVE-2025-4608

creationtimestamp| type| source ---|---|--- 2025-07-24 09:38:08+00:00| seen| Telegram/XrnQ9ahPDGSfeZHXrHzusmZ8c4WmvWEHzJBeW80BvrC9A0...

CVE-2025-4608 Structured Content <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode

The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's scfslocalbusiness shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-4608

The CVE-2025-4608 case concerns the WordPress Structured Content plugin (WordPress) with a stored cross-site scripting flaw in the sc_fs_local_business shortcode. Affected versions are all up to and including 1.6.4, where insufficient input sanitization and output escaping on user-supplied attrib...

CVE-2025-4608 Structured Content <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode

The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's scfslocalbusiness shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Structured Content plugin <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via scfslocalbusiness Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Structured Content versions = 1.6.4...

CVE-2013-4608

Cross-site scripting XSS vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page...

Security Bulletin: IBM Workload scheduler vulnerable to CVE-2019-4608 and CVE-2020-5028

Summary IBM Tivoli Dynamic Workload Console is potentially vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2019-4608 DESCRIPTION: IBM Tivoli Workload Scheduler is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...

CVE-2022-4608

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of...

CVE-2014-4608

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/NgL8djqURFf-wT2WisqVtoXKjBTwFjgsdiHpw3J2jDJbcJQb...

Malware in wlwz-2312-4608

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wlwz-2312-4608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef37c4365501d5985daf112a5c68b8b5389d4ea31a70d30cc00a9ba0a7fb553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-592 Malicious code in wlwz-2312-4608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef37c4365501d5985daf112a5c68b8b5389d4ea31a70d30cc00a9ba0a7fb553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4608

creationtimestamp| type| source ---|---|--- 2023-10-25 22:52:44+00:00| seen| https://t.me/cibsecurity/72891...

CVE-2023-4608

CVE-2023-4608 is an authenticated SQL injection vulnerability in Lenovo ThinkSystem’s XClarity Controller (XCC). The issue allows blind SQL injection in limited cases via a crafted API command when exploited by an authenticated XCC user with elevated privileges. Affected are ThinkSystem v2 and v3...

Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US

No description provided...

CVE-2022-4608

creationtimestamp| type| source ---|---|--- 2023-07-26 12:28:28+00:00| seen| https://t.me/cibsecurity/67292...

CVE-2022-4608

CVE-2022-4608 affects Hitachi Energy RTU500 series (CMU) via the HCI IEC 60870-5-104 function. The root cause is missing input validation in the HCI 60870-5-104 path when IEC 62351-3/5 support is enabled, leading to a stack overflow after the session resumption interval expires when the CMU updat...

K15512: LZO decompressor vulnerability CVE-2014-4608

Security Advisory Description DISPUTED Multiple integer overflows in the lzo1xdecompresssafe function in lib/lzo/lzo1xdecompresssafe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service memory corruption via a crafted Literal...