ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 PoC for CVE-2025-4866 — Android BLE Vulnerability public version 📡 Exploitation of BLE authorization weakness on Android devices public PoC only. 👨💻 Developed by BloodCode Labs — 2025...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: cilium-certgen-fips, dataplaneapi, polaris-fips, volume-modifier-for-k8s, nova, karpenter, k8s-metacollector-fips, secrets-store-csi-driver-provider-aws, smarter-device-manager, dbmate, cilium-fips, metacontroller, dataplaneapi-fips, victorialogs-fips, pgwatch,...

ECHO-4866-3EDD-BF66 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2015-4866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

CVE-2024-4866

The UltraAddons – Elementor Addons Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input...

CVE-2011-4866

The Kaixin001 com.kaixin001.activity application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application...

CVE-2025-4866

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4866

creationtimestamp| type| source ---|---|--- 2025-05-18 08:27:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgn4a5ohco2 2025-05-18 09:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqri6jl2s 2025-07-08...

CVE-2025-4866 weibocom rill-flow Management Console code injection

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2022-4866

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2024-4866

The UltraAddons – Elementor Addons Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input...

CVE-2024-4866 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The UltraAddons – Elementor Addons Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input...

CVE-2024-4866 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The UltraAddons – Elementor Addons Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input...

WordPress UltraAddons Elementor Lite Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software UltraAddons Elementor Lite Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4866 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6acf063eea46 Credits stealthcopter...

CVE-2023-4866

The CVE refers to SourceCodester Online Tours & Travels Management System 1.0. The issue is a SQL injection in the booking.php file, triggered by manipulating the id argument passed to the exec function. This describes a server-side code path where user-controlled input affects a SQL-executing fu...

CVE-2022-4866

The CVE-2022-4866 entry concerns the open-source project usememos/memos, where a Stored Cross-site Scripting (XSS) vulnerability affects versions prior to 0.9.1. The vulnerability is described as XSS stored in the application (no specific exploit vector details provided in the documents). Support...

CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

MariaDB 10.0.0 < 10.0.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.18 advisory. - The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of...

CVE-2020-4866

CVE-2020-4866 is an IBM Engineering-related cross-site scripting vulnerability affecting multiple IBM Jazz Team Server family products (e.g., EWM, DOORS Next, RDNG, RTC, RQM, GCM, ETM, RQM, EWM, etc.). The issue targets the Web UI, enabling an attacker to embed arbitrary JavaScript and potentiall...

Debian DSA-4866-1 : thunderbird - security update

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4866. The text itself ...