42 matches found
GHSA-6933-C37P-MPRR vulnerabilities
Vulnerabilities for packages: chromium...
ECHO-4454-6933-C9EE
Bulletin has no description...
MINI-MJ4J-6933-36J9
Bulletin has no description...
CVE-2026-6933
creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7z2bjzc2n 2026-06-16 09:23:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhyli5x32c 2026-06-16 12:05:58+00:00| seen|...
CVE-2026-6933 Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation
The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processing user-supplied POST data, combined with the...
MINI-6933-M3W7-VR56
Bulletin has no description...
CVE-2023-6933
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...
Ubuntu: Security Advisory (USN-6933-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : ClickHouse vulnerabilities (USN-6933-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6933-1 advisory. It was discovered that ClickHouse incorrectly handled memory, leading to a heap out-of-bounds data read. An attacker could possibly use this issue to cau...
LimeSurvey < 6.6.2-240827 SQLi Vulnerability
LimeSurvey is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:limesurvey:limesurvey...
CVE-2024-6933
creationtimestamp| type| source ---|---|--- 2024-07-21 04:10:11+00:00| seen| https://t.me/cvedetector/1291...
CVE-2024-6933 LimeSurvey Survey General Settings updatesurveylocalesettings_generalsettings actionUpdateSurveyLocaleSettingsGeneralSettings sql injection
A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.php?r=admin/database/index/updatesurveylocalesettingsgeneralsettings of the component Survey General Settings Handler. This manipulation of...
CVE-2024-6933 LimeSurvey Survey General Settings updatesurveylocalesettings_generalsettings actionUpdateSurveyLocaleSettingsGeneralSettings sql injection
A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.php?r=admin/database/index/updatesurveylocalesettingsgeneralsettings of the component Survey General Settings Handler. This manipulation of...
CVE-2023-6933 Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...
CVE-2023-6933
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 1.4.4 . The root cause is the deserialization of untrusted input , allowing unauthenticated attackers to inject a PHP Object. While the plugin itself lacks a POP chain , the vu...
CVE-2023-6933
creationtimestamp| type| source ---|---|--- 2024-01-26 11:34:31+00:00| exploited| https://t.me/xakepru/15297 2024-02-15 02:16:19+00:00| seen| https://t.me/ctinow/185182 2024-02-18 09:11:50+00:00| seen| https://t.me/ctinow/187179 2025-09-24 15:12:43+00:00| confirmed|...
VulnCheck KEV: CVE-2023-6933
The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...
WordPress Better Search Replace Plugin <= 1.4.4 is vulnerable to PHP Object Injection
Software Better Search Replace Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-6933 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 3ac241f51ac9 Credits Sam Pizzey mopman Required privilege...
Oracle Linux 8 : libreoffice (ELSA-2023-6933)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6933 advisory. - Resolves: rhbz2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz2210195 CVE-2023-2255 libreoffice: Remote documents...
RHEL 8 : libreoffice (RHSA-2023:6933)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6933 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...