CVE-2026-4851

creationtimestamp| type| source ---|---|--- 2026-03-26 19:35:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhydyx4lem27 2026-03-29 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116309873682821772 2026-03-31 21:19:21+00:00| published-proof-of-concept|...

CVE-2005-4851

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects...

CVE-2025-4851

creationtimestamp| type| source ---|---|--- 2025-05-18 04:32:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg7xlniggg2 2025-05-18 05:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2co3r32w 2025-05-19...

CVE-2025-4851 TOTOLINK N300RH cstecgi.cgi setUploadUserData command injection

A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The explo...

CVE-2025-4851 TOTOLINK N300RH cstecgi.cgi setUploadUserData command injection

A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The explo...

CVE-2024-4851

A Server-Side Request Forgery SSRF vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs...

CVE-2024-4851

A Server-Side Request Forgery SSRF vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs...

Ubuntu 16.04 ESM / 18.04 ESM : Libsolv vulnerabilities (USN-4851-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4851-1 advisory. It was discovered that Libsolv incorrectly handled certain malformed input. An attacker could use this issue to cause Libsolv to crash,...

CVE-2023-4851

creationtimestamp| type| source ---|---|--- 2023-09-09 16:20:27+00:00| seen| https://t.me/cibsecurity/70176 2023-09-11 12:29:56+00:00| exploited| https://t.me/kasraonecom/500...

CVE-2023-4851

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2023-4851

CVE-2023-4851 affects IBOS OA 4.5.5 and is a SQL injection in the vulnerable endpoint flagged as ?r=dashboard/position/edit&op=member. Public disclosure exists, with remote exploitation possible. Multiple connected sources identify the impact as critical/severe and confirm the attacker can remote...

CVE-2023-4851 IBOS OA edit&op=member sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2022-4851

creationtimestamp| type| source ---|---|--- 2022-12-29 20:13:21+00:00| seen| https://t.me/cibsecurity/55534 2025-04-10 16:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11275...

CVE-2022-4851

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851

The CVE-2022-4851 entry refers to usememos/memos prior to version 0.9.1, with the root cause described as improper handling of values. The vulnerability allows an attacker to post malicious content to another user’s memos page via a POST request. Public details across connected documents confirm ...

CVE-2020-4851

creationtimestamp| type| source ---|---|--- 2021-03-16 17:30:08+00:00| seen| https://t.me/cibsecurity/24955...

CVE-2020-4851

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450...

CVE-2020-4851

CVE-2020-4851 affects IBM Spectrum Scale 5.0.0–5.0.5.5 and 5.1.0–5.1.0.2. A local attacker can tamper with log files due to an access control error, potentially impacting support and development. Remediation: upgrade to IBM Spectrum Scale 5.0.5.5 (HDFS Transparency 3.1.0-7) or later for the 5.0 b...