34 matches found
CVE-2026-6889
creationtimestamp| type| source ---|---|--- 2026-07-31 04:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/33eyaxae7jcoj...
MINI-6889-2HC3-MQHX
Bulletin has no description...
MINI-VCHJ-6889-W5RF
Bulletin has no description...
MINI-8V98-6889-57XW
Bulletin has no description...
CGA-HGV3-6889-9FR2
Bulletin has no description...
CVE-2025-6889
CVE-2025-6889 affects code-projects Movie Ticketing System 1.0. The vulnerability is in the file /logIn.php where manipulating the parameter postName triggers a SQL injection . Exploitation is described as remote with a publicly disclosed exploit, indicating potential active risk. NVD lists a CVS...
CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2024-6889
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for...
RHSA-2024:6889
creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14524...
CVE-2024-6889
creationtimestamp| type| source ---|---|--- 2024-09-04 09:22:42+00:00| seen| https://t.me/cvedetector/4753...
CVE-2024-6889 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for...
CVE-2024-6889 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for...
Ubuntu 22.04 LTS / 23.10 / 24.04 LTS : .NET vulnerabilities (USN-6889-1)
The remote Ubuntu 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6889-1 advisory. It was discovered that .NET did not properly handle object deserialization. An attacker could possibly use this issue to cause a deni...
CGA-JWXC-6889-3V85
Bulletin has no description...
CVE-2023-6889 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17...
CVE-2023-6889
CVE-2023-6889 is a stored Cross-site Scripting (XSS) vulnerability affecting phpMyFAQ versions prior to 3.1.17 (GitHub repository thorsten/phpmyfaq). The available connected documents consistently describe the flaw as a stored XSS issue in phpMyFAQ and reference public disclosures/advisories (inc...
部分MediaTek芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a local privilege escalation due to a lack of privilege checking in vow. The following products are affected: MT6580, MT6735, MT6737, MT6739,...