Golang 1.23.x < 1.23.11 / 1.24.x < 1.24.5 Command Execution

The version of Golang running on the remote host is 1.23.x prior to 1.23.11, 1.24.x prior to 1.24.3. It is, therefore, affected by a command execution vulnerability as referenced in 74380 advisory. - Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code...

go1.24-1.24.5-1.1 on GA media (moderate)

go1.24-1.24.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15329-1 Rating: moderate Cross-References: CVE-2025-4674 CVSS scores: CVE-2025-4674 SUSE : 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2025-4674 SUSE : 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

CVE-2025-4674

creationtimestamp| type| source ---|---|--- 2025-07-08 17:55:04+00:00| seen| https://bsky.app/profile/golang.org/post/3lthuofsd222w 2025-07-08 19:35:54+00:00| seen| https://seclists.org/oss-sec/2025/q3/14 2025-07-08 21:56:39+00:00| seen|...

CVE-2022-4674

The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2012-4674

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2024-4674

creationtimestamp| type| source ---|---|--- 2025-02-19 19:14:02+00:00| seen| Telegram/B8dzfxE0CDZcnYAJg7NUWn0Hwlr4zqWGCF2h2O34KHoo7VG5...

CVE-2024-4674

CVE-2024-4674 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability resides in the /view/show_friend_request.php page, where unsafely handling the my_index parameter enables cross-site scripting. The issue can be triggered remotely and exploit details have been publ...

RHEL 8 / 9 : OpenShift Container Platform 4.12.30 (RHSA-2023:4674)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4674 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

RHCOS 4 : OpenShift Container Platform 4.12.30 (RHSA-2023:4674)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4674 advisory. - golang: net/http: handle server errors after sending GOAWAY CVE-2022-27664 Note that Nessus has not tested for this issue but has instead...

CVE-2023-4674

creationtimestamp| type| source ---|---|--- 2023-12-29 16:26:38+00:00| seen| https://t.me/ctinow/160571 2023-12-30 01:42:13+00:00| seen| https://t.me/cibsecurity/73992...

CVE-2023-4674

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: through 20231229. NOTE: The vendor was contacted early about this...

CVE-2023-4674 SQLi in Yazteks E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: through 20231229. NOTE: The vendor was contacted early about this...

CVE-2023-4674

CVE-2023-4674 affects Yaztek Software Technologies and Computer Systems’ E-Commerce Software (through 20231229). The vulnerability is an SQL Injection due to improper neutralization of special elements in an SQL command. Affected component/attack surface is the E‑Commerce Software product as rele...

CVE-2022-4674

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:42+00:00| seen| https://t.me/cibsecurity/57587...

CVE-2022-4674

The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-4674

The CVE-2022-4674 entry concerns the Ibtana WordPress Website Builder plugin prior to 1.1.8.8. Affected component: a shortcode attribute in the plugin’s code that is not validated or escaped. Root cause: failure to validate/escape a shortcode attribute, enabling Stored Cross-Site Scripting when a...

CVE-2022-4674 Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode

The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

WordPress Ibtana Plugin < 1.1.8.8 is vulnerable to Cross Site Scripting (XSS)

Software Ibtana Type Plugin Vulnerable versions 1.1.8.8 Fixed in 1.1.8.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4674 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID e564cfbd3326 Credits Lana Codes Required...

CVE-2020-4674

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:38+00:00| seen| https://t.me/cibsecurity/21950...

CVE-2020-4674

CVE-2020-4674 affects IBM Workload Automation 9.5.x, where the server path is exposed in URLs, potentially aiding information disclosure and subsequent attacks. The root cause is path disclosure in the application. Remediation: IBM states APAR IJ30009 to address CVE-2020-4674; the fix is included...