CVE-2026-4906

A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-4906

creationtimestamp| type| source ---|---|--- 2026-03-26 22:11:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116297765131477192 2026-03-27 03:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhz5fdz4ng24 2026-03-27 03:18:19+00:00| seen|...

MiracleLinux 9 : 389-ds-base-2.1.3-4.el9 (AXSA:2023-4906:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4906:01 advisory. 389-ds-base: sending crafted message could result in DoS CVE-2022-0918 389-ds-base: SIGSEGV in syncrepl CVE-2022-2850 389-ds-base: expired password...

Linux Distros Unpatched Vulnerability : CVE-2015-4908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different...

CVE-2025-4906

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-4906

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2025-4906

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16788 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissiqwkl2p...

CVE-2025-4906

CVE-2025-4906 affects PHPGurukul Notice Board System v1.0. Affects the login.php file where manipulation of the Username argument enables SQL injection, with remote access and public disclosure of exploits noted across multiple sources. Root cause is an unresolved SQL statement handling in the lo...

CVE-2025-4906 PHPGurukul Notice Board System login.php sql injection

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-4906

creationtimestamp| type| source ---|---|--- 2025-02-20 23:26:57+00:00| seen| Telegram/TlLsZarGv7wxSgZWvQA4fmbqmkzUuJrR8msFM3mIdIyj9k...

Fedora: Security Advisory (FEDORA-2023-c890266d3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4906

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4906 Campcodes Complete Web-Based School Management System show_student1.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4906 Campcodes Complete Web-Based School Management System show_student1.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4906

CVE-2024-4906 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in the /view/show_student1.php file via the grade parameter, enabling remote exploitation. Exploit has been disclosed publicly; no remediation details are provided in the connecte...

Malicious code in wlwz-2312-4906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f73c768ec25079dbe4abbe2052b1ca9891508a7d3103e22798113105a18bce7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-617 Malicious code in wlwz-2312-4906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f73c768ec25079dbe4abbe2052b1ca9891508a7d3103e22798113105a18bce7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for chromium (FEDORA-2023-b427f54e68)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5499-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5499 advisory. - Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt v...

[SECURITY] [DSA 5499-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5499-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2023 https://www.debian.org/security/faq -...