CVE-2026-4832

creationtimestamp| type| source ---|---|--- 2026-04-14 13:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhczv3ac2r...

GO-2026-4832 NATS JetStream has an authorization bypass through its Management API in github.com/nats-io/nats-server

NATS JetStream has an authorization bypass through its Management API in github.com/nats-io/nats-server...

📄 Oracle Database Server 9.2.0.5 SQL Injection

Oracle Database Server version 9.2.0.5 proof of concept remote SQL injection exploit that leverages SYS.DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION and makes use of an older vulnerability from 2005...

MINI-6GVX-4832-QFGM

Bulletin has no description...

CVE-2022-4832

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

CVE-2013-4832

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2025-4832

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4832

creationtimestamp| type| source ---|---|--- 2025-05-17 18:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpf73rntqk2o 2025-05-17 20:26:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfeupcnvad2...

CVE-2025-4832

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4832 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-4832

The CVE-2025-4832 issue affects TOTOLINK A702R, A3002R, and A3002RU (version 3.0.0-B20230809.1615). The vulnerability is in the /boafrm/formDosCfg HTTP POST Request Handler, where tampering with the submit-url argument causes a buffer overflow. Impact is remote code execution-like risk with high ...

Ubuntu 18.04 ESM : Plexus Archiver vulnerability (USN-4832-1)

The remote Ubuntu 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4832-1 advisory. It was discovered that Plexus Archiver incorrectly handled directory traversal during extraction. An attacker could possibly use this for a Zip-Slip attack. Tenab...

CVE-2023-4832

creationtimestamp| type| source ---|---|--- 2023-09-14 22:43:53+00:00| seen| https://t.me/cibsecurity/70547...

CVE-2023-4832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...

CVE-2023-4832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...

CVE-2023-4832 SQLi in Aceka Holdings Company Management

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...

CVE-2023-4832 SQLi in Aceka Holdings Company Management

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...

CVE-2023-4832

CVE-2023-4832 affects Aceka Company Management. The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, affecting versions prior to 3072. The root cause is improper input handling within the software’s SQL query construction, enabling injection payloads. ...

CVE-2022-4832

The CVE-2022-4832 entry applies to the Store Locator WordPress plugin prior to version 1.4.9. The underlying issue is failure to validate/escape certain shortcode attributes, allowing Stored XSS. The attack can be executed by users with as little as Contributor privileges to target higher-privile...

CVE-2022-4832 Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode

The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...