53 matches found
CVE-2026-4850
creationtimestamp| type| source ---|---|--- 2026-03-26 07:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4850 2026-03-26 09:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxdt3xewl23 2026-04-04 06:20:09+00:00| seen|...
EUVD-2018-4850
Malware in sbrugna...
CVE-2023-4850
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...
CVE-2022-4850
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2011-4850
The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by...
CVE-2025-4850
A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pluginname leads to command injection. It is possible to initiate the attack remotely. The...
CVE-2025-4850
A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pluginname leads to command injection. It is possible to initiate the attack remotely. The...
CVE-2025-4850 TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection
A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pluginname leads to command injection. It is possible to initiate the attack remotely. The...
CVE-2025-4850
CVE-2025-4850 affects TOTOLINK N300RH (6.1c.1390_B20191101). The issue lies in the function setUnloadUserData in the file /cgi-bin/cstecgi.cgi, where manipulating the argument plugin_name enables a remote command injection . Multiple sources confirm a critical vulnerability with public exploit di...
RHSA-2024:4850
creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-01-20 09:59:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2355 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260...
CVE-2023-4850
creationtimestamp| type| source ---|---|--- 2023-09-09 16:20:28+00:00| seen| https://t.me/cibsecurity/70177...
CVE-2023-4850
CVE-2023-4850 - Summary (concrete details from connected docs): IBOS OA 4.5.5 contains a SQL injection vulnerability in an unknown part of the file at the endpoint ?r=dashboard/position/del. The flaw allows remote initiation of an attack and has been publicly disclosed. Multiple sources confirm t...
CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4850
The CVE-2022-4850 entry describes a Cross-Site Request Forgery (CSRF) in the GitHub repository usememos/memos for versions prior to 0.9.1. Affected software: usememos/memos (pre-0.9.1). The underlying issue is CSRF that could enable an attacker to cause unintended actions on behalf of an authenti...
Siemens SIMATIC S7-400 CPU Improper Input Validation (CVE-2018-4850)
A vulnerability has been identified in SIMATIC S7-400 incl. F CPU hardware version 4.0 and below All versions, SIMATIC S7-400 incl. F CPU hardware version 5.0 All firmware versions V5.2, SIMATIC S7-400H CPU hardware version 4.5 and below All versions. The affected CPUs improperly validate S7...
CVE-2020-4850
CVE-2020-4850 affects IBM Spectrum Scale Transparent Cloud Tiering (versions 1.1.1.0–1.1.8.4). The root cause is leftover configuration files that enable a remote attacker to access sensitive information. The NVD notes a base score of 5.0 (CVSS2) and 7.5 (CVSS3.1) with network attack vector and n...
Debian DSA-4850-1 : libzstd - security update
It was discovered that zstd, a compression utility, temporarily exposed a world-readable version of its input even if the original file had restrictive permissions. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...