MINI-P6QR-4846-2XH3

Bulletin has no description...

CVE-2026-4846

creationtimestamp| type| source ---|---|--- 2026-03-26 09:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxcgdp6av27...

CVE-2026-4846

A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an unknown function of the file channel/admin.Account/autoReply.html. Such manipulation of the argument keyword leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

GHSA-CPHF-4846-3XX9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:27+00:00| seen| https://gist.github.com/alon710/eefdba86d78cf9d537d1f9c4b9b5bbb8 2026-01-24 22:30:55+00:00| seen| https://gist.github.com/alon710/a0444330b8b18e01bcd1d36bc2783bd6 2026-01-24 22:30:58+00:00| seen|...

GHSA-CPHF-4846-3XX9 vulnerabilities

Vulnerabilities for packages: kafka-bridge-fips, apache-pulsar, strimzi-kafka-operator, keycloak-fips, kafka-bridge, knative-kafka-broker, spark, apicurio-registry, knative-kafka-broker-fips, keycloak, wildfly, druid, spark-fips...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2025-4846

creationtimestamp| type| source ---|---|--- 2025-05-18 01:33:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfw2hliboo2 2025-05-18 05:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2c4ipq2e...

CVE-2025-4846 FreeFloat FTP Server MPUT Command buffer overflow

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4846 FreeFloat FTP Server MPUT Command buffer overflow

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4846

CVE-2025-4846 concerns FreeFloat FTP Server 1.0, where the vulnerability is in the MPUT Command Handler . The issue is a buffer overflow triggered by improper input length validation, with the potential to be exploited remotely. Public exploitation details have been disclosed. Several connected s...

CVE-2024-4846

CVE-2024-4846 describes an authentication bypass in the 2FA feature of Devolutions Server, affected versions 2024.1.14.0 and earlier. An authenticated attacker can sign in as another user without being prompted for 2FA via another browser tab. The available connected documents confirm the vulnera...

CVE-2023-4846

creationtimestamp| type| source ---|---|--- 2023-09-10 09:58:50+00:00| seen| https://t.me/cibsecurity/70173 2025-06-25 14:51:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19461...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...

CVE-2023-4846 SourceCodester Simple Membership System delete_member.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2022-4846

creationtimestamp| type| source ---|---|--- 2022-12-29 20:13:18+00:00| seen| https://t.me/cibsecurity/55531 2025-04-10 16:49:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11273...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846

CVE-2022-4846 concerns Cross-Site Request Forgery (CSRF) in the open-source memo platform usememos/memos, with affected versions prior to 0.9.1. Multiple connected sources confirm the vulnerability in this GitHub-hosted project and reference similar advisories (GHSA, CNVD/CNNVD, OSV) describing C...

Debian: Security Advisory (DSA-4846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...