46 matches found
MINI-4849-9HJV-VH25
Bulletin has no description...
CVE-2026-4849 code-projects Simple Laundry System Parameter modify.php cross site scripting
A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is...
CVE-2026-4849
creationtimestamp| type| source ---|---|--- 2026-03-26 07:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4849 2026-03-26 09:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxc6o4ckg2i...
CVE-2025-4849
creationtimestamp| type| source ---|---|--- 2025-05-18 03:35:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg4u3zy2db2 2025-05-18 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2cha342p 2025-05-19...
CVE-2025-4849
A vulnerability was found in TOTOLINK N300RH 6.1c.1390B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to command injection. The attack may be launched remotely...
WordPress Automatic Plugin <= 3.94.0 is vulnerable to Cross Site Scripting (XSS)
Software Automatic Type Plugin Vulnerable versions = 3.94.0 Fixed in 3.95.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4849 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c71dc29444f6 Credits haidv35 Required privilege...
CVE-2023-4849
CVE-2023-4849: A SQL injection vulnerability affects IBOS OA 4.5.5, triggered by manipulating the fids parameter in the file path ?r=file/dashboard/trash&op=del. The issue originates from an unknown function within that endpoint, enabling remote exploitation. Multiple sources confirm the vulnerab...
CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4849
CVE-2022-4849 describes a Cross-Site Request Forgery (CSRF) in the GitHub repository usememos/memos prior to version 0.9.1. The vulnerability affects the public project code path and leads to action execution on behalf of an authenticated user, with impact described as high for integrity and pote...
CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2020-4849
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 190294...
CVE-2020-4849
CVE-2020-4849 affects IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7. The issue is a reverse tabnabbing flaw that could allow a remote attacker to bypass security restrictions and direct a victim to a phishing site. IBM references remediation: upgrade to 7.1.0.20 (FP20). Connect...
Security Bulletin: IBM Tivoli Netcool Impact is affected by a reverse tabnabbing vulnerability (CVE-2020-4849)
Summary IBM Tivoli Netcool Impact has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4849 DESCRIPTION: IBM Tivoli Netcool Impact could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this...
CVE-2019-4849
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-4849
The CVE-2018-4849 vulnerability affects Siemens Siveillance VMS Video Mobile Apps for Android and iOS (versions before 12.1a 2018 R1). It stems from improper certificate validation, enabling a privileged network attacker to read and write data on the encrypted channel between the app and its serv...