ECHO-8411-5BB8-D491

Bulletin has no description...

CVE-2026-8411

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery CSRF at concrete/controllers/dialog/page/bulk/delete. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Yonata...

CVE-2026-8411

creationtimestamp| type| source ---|---|--- 2026-05-21 22:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmfiubuila2q...

MiracleLinux 8 : pki-core:10.6 (AXSA:2024-8411:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8411:01 advisory. jackson-databind: denial of service via a large depth of nested objects CVE-2020-36518 Tenable has extracted the preceding description block directly from th...

CVE-2025-8411

creationtimestamp| type| source ---|---|--- 2025-09-17 15:28:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz25med5a42x 2025-09-18 16:08:16+00:00| seen| https://bsky.app/profile/lynxintel.bsky.social/post/3lz4qbs37vf2q...

CVE-2025-8411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers. This issue affects E-Commerce Web Design Product: before 11.08.2025...

CVE-2024-8411

creationtimestamp| type| source ---|---|--- 2024-09-04 17:44:44+00:00| seen| https://t.me/cvedetector/4792...

CVE-2024-8411

A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscarintegrada.php. Executing a manipulation of the argument SubExpresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly...

CVE-2024-8411

A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscarintegrada.php. Executing a manipulation of the argument SubExpresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly...

CVE-2024-8411 ABCD ABCD2 buscar_integrada.php cross site scripting

A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscarintegrada.php. Executing a manipulation of the argument SubExpresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly...

SUSE CVE-2015-8411

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

CVE-2020-8411

...

CVE-2020-8411

CVE-2020-8411 is rejected/not used; this CVE ID does not represent an active vulnerability.

CVE-2017-8411

creationtimestamp| type| source ---|---|--- 2019-07-02 22:34:23+00:00| seen| https://t.me/cibsecurity/5301...

CVE-2017-8411

CVE-2017-8411 affects D-Link DCS-1130 devices. A command-injection path exists via a POST parameter that can be processed by a vulnerable system API, enabling execution of arbitrary commands. Investigations point to libmailutils.so, where a vulnerable function sub_1FC4 receives POST data; the val...

CVE-2019-8411

The CVE-2019-8411 entry concerns zzcms (2018 release) where admin/dl_data.php enables a directory-traversal vulnerability. The underlying issue allows remote attackers to delete arbitrary files by crafting filename via action=del&filename=../, exposing an impact on integrity and availability stat...

CVE-2019-8411

admin/dldata.php in zzcms 2018 2018-10-19 allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal...

CVE-2018-8411

creationtimestamp| type| source ---|---|--- 2018-10-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45624...

CVE-2018-8411

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016,...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...