94 matches found
MINI-M6FQ-4924-W5RF
Bulletin has no description...
MINI-4924-FPWP-J856
Bulletin has no description...
MINI-4924-7HC6-26WV
Bulletin has no description...
CVE-2026-4924
creationtimestamp| type| source ---|---|--- 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ 2026-04-02 07:16:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwrvufm2w 2026-04-05 11:40:10+00:00| seen|...
CVE-2026-4924
The Devolutions Server software (versions 2026.1.11 and earlier) contains an improper authentication vulnerability in its two-factor authentication (2FA) feature. A remote attacker possessing valid credentials can bypass multi-factor authentication to gain unauthorized access to a victim's accoun...
ECHO-CABD-7414-4924 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
CVE-2023-4924
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability checks on the woobebulkoperationsdelete function. This makes it possible for authenticated attackers, with subscriber access or higher, to delete products...
CGA-MJWM-4924-VQ65
Bulletin has no description...
CVE-2010-4924
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party...
CVE-2025-4924
creationtimestamp| type| source ---|---|--- 2025-05-19 09:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16836 2025-05-19 13:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnjmvep2p...
CVE-2025-4924 SourceCodester Client Database Management System user_void_transaction.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /uservoidtransaction.php. The manipulation of the argument orderid leads to sql injection. It is possible to launch the attack remotely...
CVE-2024-4924 Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4924 Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4924
The Sassy Social Share (also referred to as the Social Sharing Plugin ) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 3.3.63 . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such...
WordPress Sassy Social Share Plugin < 3.3.63 is vulnerable to Cross Site Scripting (XSS)
Software Sassy Social Share Type Plugin Vulnerable versions 3.3.63 Fixed in 3.3.63 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4924 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8218db38fbf6 Credits Dmitrii Ignatyev...
CGA-4924-8F2C-2FPR
Bulletin has no description...
CVE-2023-4924
creationtimestamp| type| source ---|---|--- 2023-10-20 12:41:23+00:00| seen| https://t.me/cibsecurity/72679...
CVE-2023-4924
CVE-2023-4924 affects BEAR – Bulk Editor and Products Manager Pro for WooCommerce (Pluginus.Net). Versions up to 1.1.3.3 are vulnerable due to missing capability checks in woobe_bulkoperations_delete, enabling authenticated users with subscriber access or higher to delete products. Red Hat/NVD/Wo...
CVE-2023-4924 BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability checks on the woobebulkoperationsdelete function. This makes it possible for authenticated attackers, with subscriber access or higher, to delete products...