assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-48110 +1 more via russh (>=0.34.0, <=0.43.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-48110, CVE-2026-73489 Source advisory: GHSA-CQJC-RMPQ-XPRQ...

assistant_daemon (0.1.0), async-ssh2-tokio (>=0.2.0, <=0.8.11) +7 more potentially affected by CVE-2026-48110 via russh (>=0.34.0, <=0.43.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - sshrpc 0.1.0 - tunnels 0.1.0 Source cves: CVE-2026-48110 Source advisory: OSV:GHSA-4R3C-5HPG-58QR...

Linux Distros Unpatched Vulnerability : CVE-2026-48110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, several russh client and server message handlers decoded...

CVE-2026-48110

creationtimestamp| type| source ---|---|--- 2026-05-20 22:50:48+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-4r3c-5hpg-58qr 2026-06-10 23:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxsv4ht3726 2026-06-10...

EUVD-2025-48110

Malicious code in dian-lengko25-sukiwir npm...

CVE-2025-48110 WordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: from n/a through = 0.8.0...

WordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha Patchstack Alliance in WordPress Plugin Link View versions = 0.8.0...

CVE-2023-48110

Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service DoS attack...

CVE-2022-48110

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...

CVE-2023-48110

CVE-2023-48110 describes a heap overflow in Tenda AX1803 v1.0.0.1, triggered by the urls parameter in the saveParentControlInfo function, leading to Denial of Service. Affected product: Tenda AX1803 (v1.0.0.1). Root cause: heap overflow due to input length validation in saveParentControlInfo. Imp...

CVE-2022-48110

creationtimestamp| type| source ---|---|--- 2023-02-13 22:29:56+00:00| seen| https://t.me/cibsecurity/58021 2026-09-01 20:01:04+00:00| seen| https://t.me/hackingAttack/89590 2026-09-02 01:01:25+00:00| seen| https://t.me/hackingAttack/89590 2026-09-04 21:00:04+00:00| published-proof-of-concept|...

CVE-2022-48110

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...

CKSource CKEditor5 35.4.0 Cross Site Scripting Vulnerability

Exploit Title: Cross Site Scripting in CKSource's CKEditor5 35.4.0 Google Dork: N/A Exploit Author: Manish Pathak Vendor Homepage: https://cksource.com/ Software Link: https://ckeditor.com/ckeditor-5/download/ Version: 35.4.0 Tested on: Linux / Web CVE : CVE-2022-48110 CKSource CKEditor5 35.4.0 w...

CVE-2022-48110

CVE-2022-48110 affects CKSource CKEditor 5 35.4.0. Description: cross-site scripting via the Full Featured CKEditor5 widget due to improper validation/sanitization of user-supplied input. Impact stated in sources: an attacker could execute script in a victim’s browser and potentially steal cookie...