36 matches found
Netsweeper - Authentication Bypass
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. id: CVE-2014-9618 info: name: Netsweeper - Authentication...
CVE-2026-9618
creationtimestamp| type| source ---|---|--- 2026-05-28 11:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwkj32ox2i...
RHCOS 9 : OpenShift Container Platform 4.16.23 (RHSA-2024:9618)
The remote Red Hat Enterprise Linux CoreOS 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9618 advisory. - waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request CVE-2024-49768 -...
EUVD-2020-3336
Malware in sbrugna...
CVE-2025-9618
creationtimestamp| type| source ---|---|--- 2025-08-30 06:54:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxlyipn3nk2v...
CVE-2024-9618
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.7.2 due to insufficient input sanitization and output...
CVE-2024-9618
creationtimestamp| type| source ---|---|--- 2025-03-04 09:32:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6361 2025-03-04 10:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3j7xf2p 2025-03-04 12:30:04+00:00| seen| https://t.me/cvedetector/19488...
CVE-2024-9618
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.7.2 due to insufficient input sanitization and output...
CVE-2024-9618 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.7.2 due to insufficient input sanitization and output...
CVE-2024-9618
CVE-2024-9618: Master Addons for Elementor (WordPress) is affected by a Stored Cross-Site Scripting vulnerability in multiple widgets, present in all versions up to 2.0.7.2. Root cause is insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authen...
Linux Distros Unpatched Vulnerability : CVE-2017-9618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xpsloadsfntname function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service buffer overflow and...
CVE-2020-10930
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...
Design/Logic Flaw
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...
CVE-2020-10930
CVE-2020-10930 affects NETGEAR R6700 routers (V1.0.4.84_10.0.58). The flaw is in URL handling due to improper routing, enabling network-adjacent attackers to disclose stored credentials. Multiple sources (NVD, Red Hat, CNVD, CVE records) reference ZDI-CAN-9618; exploitation details are not provid...
CVE-2020-9618
Adobe Audition is affected by CVE-2020-9618: an out-of-bounds read in versions 13.0.5 and earlier that could disclose information. The issue stems from improper validation during MOV file parsing and is addressed in the APSB20-28 patch, Adobe Audition 13.0.6 for Windows/macOS. In vendor advisorie...
CVE-2020-9618
Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
Attackers were spotted targeting over one million WordPress websites in a campaign over the weekend. The campaign unsuccessfully attempted to exploit old cross-site scripting XSS vulnerabilities in WordPress plugins and themes, with the goal of harvesting database credentials. The attacks were...
VulnCheck KEV: CVE-2019-9618
The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter...
Gracemedia Media Player Local File Inclusion (CVE-2019-9618)
A vulnerability exists in gracemedia media player project gracemedia media player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...