ECHO-4898-C2BC-3B81

Bulletin has no description...

CVE-2026-4898

creationtimestamp| type| source ---|---|--- 2026-03-27 00:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyv2xgn222g...

CVE-2025-4898

creationtimestamp| type| source ---|---|--- 2025-05-18 22:37:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16781 2025-05-19 01:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpifexo7dm2o...

CVE-2025-4898

CVE-2025-4898 affects SourceCodester Student Result Management System 1.0. The vulnerability resides in the Logo File Handler inside the function handling unlink in the file update_system.php, where manipulation of the argument old_logo enables a path traversal . Exploitation can be performed rem...

CVE-2025-4898 SourceCodester Student Result Management System Logo File update_system.php unlink path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The...

CVE-2025-4898 SourceCodester Student Result Management System Logo File update_system.php unlink path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The...

CGA-72W7-8JFJ-4898

Bulletin has no description...

CVE-2024-4898

creationtimestamp| type| source ---|---|--- 2024-06-12 10:27:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7623 2025-02-08 23:21:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3904 2025-09-16 21:02:31+00:00| seen|...

WordPress InstaWP Connect Plugin <= 0.1.0.38 is vulnerable to Broken Access Control

Software InstaWP Connect Type Plugin Vulnerable versions = 0.1.0.38 Fixed in 0.1.0.39 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4898 Patch priority High CVSS severity High 9.8 Developer InstaWP PSID 3572e9bad95d Credits Truoc Phan Required privilege...

RHCOS 4 : OpenShift Container Platform 4.10.67 (RHSA-2023:4898)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4898 advisory. - kube-apiserver: PrivEsc CVE-2023-1260 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898

CVE-2023-4898 describes an authentication bypass in the GitHub repository mintplex-labs/anything-llm, affecting versions prior to 0.0.1. The vulnerability is categorized as an authentication bypass caused by a primary weakness, with the affected component being Anything-LLM. Public references in ...

CVE-2022-4898

creationtimestamp| type| source ---|---|--- 2023-01-31 07:37:47+00:00| seen| https://t.me/cibsecurity/57201...

CVE-2022-4898

CVE-2022-4898 affects Octopus Server: the help sidebar could be customized to include a Cross-Site Scripting payload in the support link. The original fix from advisory 2022-07 could be bypassed in certain circumstances, and a different approach was taken to prevent the support link from being su...

Debian DSA-4898-1 : wpa - security update

Several vulnerabilities have been discovered in wpasupplicant and hostapd. - CVE-2020-12695 It was discovered that hostapd does not properly handle UPnP subscribe messages under certain conditions, allowing an attacker to cause a denial of service. - CVE-2021-0326 It was discovered that...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : curl vulnerabilities (USN-4898-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4898-1 advisory. Viktor Szakats discovered that curl did not strip off user credentials from referrer header fields. A remote attacker could...

CVE-2020-4898

creationtimestamp| type| source ---|---|--- 2021-01-07 20:40:48+00:00| seen| https://t.me/cibsecurity/21764...

CVE-2020-4898

The CVE-2020-4898 issue applies to IBM Emptoris Strategic Supply Management Platform/SSMP 10.1.3.x. The IBM security bulletin documents a weak cryptographic algorithm vulnerability that could allow an attacker to decrypt highly sensitive information (Lucky 13 vulnerability). Affected product vers...

Security Bulletin: Lucky 13 Vulnerability Affects IBM Emptoris Strategic Supply Management Platform (CVE-2020-4898)

Summary Lucky 13 attack affects IBM IBM Emptoris Strategic Supply Management Platform. Vulnerability Details CVEID: CVE-2020-4898 DESCRIPTION: IBM Emptoris uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base score: 5.9...