ECHO-15EF-6486-8FD7

Bulletin has no description...

MINI-6486-Q68H-V42J

Bulletin has no description...

ECHO-6486-9A91-3077

Bulletin has no description...

CVE-2026-52809

creationtimestamp| type| source ---|---|--- 2026-06-19 02:19:01+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-5c3f-6486-3g7g...

CVE-2026-6486

A vulnerability was detected in classroombookings up to 2.17.0. This impacts the function read of the file crbs-core/application/views/layout.php of the component User Display Name Handler. The manipulation of the argument displayname results in cross site scripting. The attack can be executed...

MINI-PJMR-6486-R26V

Bulletin has no description...

CVE-2026-6486

creationtimestamp| type| source ---|---|--- 2026-04-17 14:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4z6whrh2r...

EUVD-2018-9396

Malware in sbrugna...

CVE-2025-6486

creationtimestamp| type| source ---|---|--- 2025-06-22 17:48:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19169 2025-06-22 18:01:10+00:00| published-proof-of-concept| Telegram/9QeQulG2vzRrbjPDKY27goy-qKpEqzaxzd1PyqmN5ySnKic 2025-06-22 19:19:12+00:00| seen|...

CVE-2025-6486 TOTOLINK A3002R formWlanMultipleAP stack-based overflow

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been declared as critical. This vulnerability affects the function formWlanMultipleAP of the file /boafrm/formWlanMultipleAP. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can ...

WordPress ImageMagick Engine plugin < 1.7.11 - Administrator+ OS Command Injection vulnerability

Administrator+ OS Command Injection vulnerability discovered by Chaiwat Thongyaem in WordPress Plugin ImageMagick Engine versions 1.7.11...

CVE-2024-6486 ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

CVE-2024-6486 ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

Linux Distros Unpatched Vulnerability : CVE-2019-6486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or...

GHSA-98PX-6486-J7QC

creationtimestamp| type| source ---|---|--- 2025-01-07 16:37:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/452...

RHEL 8 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: Command-line arguments may overwrite global data CVE-2021-38297 - In archive/zip in Go before...

WordPress Spectra Plugin <= 2.10.3 is vulnerable to Cross Site Scripting (XSS)

Software Spectra Type Plugin Vulnerable versions = 2.10.3 Fixed in 2.10.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6486 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2ec9e8bd69ac Credits Akbar Kustirama Required...

Ubuntu 22.04 LTS / 23.04 / 23.10 : iniParser vulnerability (USN-6486-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6486-1 advisory. It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause a crash. Tenable has...

Oracle Linux 7 : docker-engine (ELSA-2019-4550)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4550 advisory. - apply fix for runc CVE-2019-5736 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : docker-engine (ELSA-2019-4551)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4551 advisory. - update runc for CVE-2019-5736 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...