47 matches found
CVE-2026-4845 dameng100 muucmf index.html cross site scripting
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the file /admin/Member/index.html. This manipulation of the argument Search causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The...
CVE-2025-4845
creationtimestamp| type| source ---|---|--- 2025-05-18 01:33:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfw2hovi5o2 2025-05-18 05:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2bovjv2h...
CVE-2025-4845
A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component TRACE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclose...
CVE-2025-4845 FreeFloat FTP Server TRACE Command buffer overflow
A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component TRACE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclose...
CVE-2025-4845
CVE-2025-4845 affects FreeFloat FTP Server 1.0, with the TRACE Command Handler being vulnerable. The issue is a buffer overflow caused by improper input length validation, enabling a remote attacker to exploit it. Public exploit information exists. The reported mitigations include disabling the T...
CVE-2024-4845 Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘optionslistid’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
Ubuntu 16.04 ESM / 18.04 ESM : libcgroup vulnerability (USN-4845-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4845-1 advisory. It was discovered that libcgroup incorrectly handled log file permissions. An attacker could possibly use this issue to obtain sensitive information...
CVE-2023-4845
creationtimestamp| type| source ---|---|--- 2023-09-09 12:20:18+00:00| seen| https://t.me/cibsecurity/70174...
Ubuntu: Security Advisory (USN-4845-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4845
creationtimestamp| type| source ---|---|--- 2022-12-29 20:13:23+00:00| seen| https://t.me/cibsecurity/55537 2025-04-10 16:49:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11272...
CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4845
CVE-2022-4845 affects the usememos/memos project prior to version 0.9.1, with a Cross-Site Request Forgery (CSRF) vulnerability reported. The issue arises from CSRF in the web application, enabling unauthorized actions if a user is lured to a malicious site while authenticated. Affected software ...
CVE-2020-4845
creationtimestamp| type| source ---|---|--- 2020-12-17 22:42:57+00:00| seen| https://t.me/cibsecurity/21011...
CVE-2019-4845
CVE-2019-4845 is rejected and not used per the Initial Description.
CVE-2018-4845
Affected products and versions: RAPIDLab 1200 systems (prior to V3.3), RAPIDPoint 400 systems (all versions), and RAPIDPoint 500 systems (prior to V3.0, V2.4.X, and ≤ V2.3). Vulnerability: remote attackers with local or remote credentialed access to the"Remote View" feature can elevate privileges...