FreeBSD : unbound -- multiple vulnerabilities (f63b4b88-6901-4c12-b13d-5a821e25e9bf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f63b4b88-6901-4c12-b13d-5a821e25e9bf advisory. NLnet Labs reports: This release consolidates security fixes for issues reported over a period...

CVE-2026-6901

creationtimestamp| type| source ---|---|--- 2026-07-06 12:02:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy27ybpzk2c...

EUVD-2022-6901

Malicious code in bioql PyPI...

CVE-2025-6901

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2025-6901

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2025-6901 code-projects Inventory Management System removeUser.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2025-6901 code-projects Inventory Management System removeUser.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2023-6901

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os...

CVE-2024-6901

creationtimestamp| type| source ---|---|--- 2024-07-19 10:21:17+00:00| seen| https://t.me/cvedetector/1197...

CVE-2024-6901

A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. The manipulation of the argument school leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-6901 SourceCodester Record Management System entry.php sql injection

A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. The manipulation of the argument school leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

Ubuntu: Security Advisory (USN-6901-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : stunnel vulnerability (USN-6901-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6901-1 advisory. It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remot...

MAL-2024-792 Malicious code in wlwz-2312-6901 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93c4ad44423942b435de63caf1ec77479ccf4e253b0942a59f0c6fcca3d8a5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6901 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93c4ad44423942b435de63caf1ec77479ccf4e253b0942a59f0c6fcca3d8a5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6901

creationtimestamp| type| source ---|---|--- 2023-12-21 00:18:01+00:00| seen| https://t.me/ctinow/157422 2024-01-11 22:02:00+00:00| seen| https://t.me/ctinow/166869...

CVE-2023-6901

CVE-2023-6901 affects codelyfe Stupid Simple CMS versions up to 1.2.3. The vulnerability lies in the HTTP POST Request Handler’s file /terminal/handle-command.php, where using the argument with input “whoami” enables an OS command injection. The issue is exploitable remotely and an exploit has be...

RHEL 8 : kernel-rt (RHSA-2023:6901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6901 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

json-pointer has an unspecified vulnerability

Json-Pointer is an open source, Rfc 6901 described by Manuel Stofer, a Swiss individual developer of some utilities for Json pointers. json-pointer has a security vulnerability that stems from improper design or implementation during the code development of a web-based system or product. No...

Code Injection in flitbit/json-ptr

✍️ Description json-ptr is a complete implementation of JSON Pointer RFC 6901 for nodejs and modern browsers. JsonPointer.get that is designed to get the target object's value at the pointer's location is vulnerable to arbitrary code injection and exection, mainly due to the lack of sanitizing for...