124 matches found
CVE-2025-61492
A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...
CVE-2025-61492
A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...
EUVD-2025-7864
Malicious code in bioql PyPI...
WordPress WP No-Bot Question plugin <= 0.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP No-Bot Question versions = 0.1.7...
CVE-2025-28909
Cross-Site Request Forgery CSRF vulnerability in edwardw WP No-Bot Question wp-no-bot-question allows Cross Site Request Forgery.This issue affects WP No-Bot Question: from n/a through = 0.1.7...
CVE-2025-28909
CVE-2025-28909 describes a Cross-Site Request Forgery vulnerability in the WordPress plugin “WP No-Bot Question” (edwardw) affecting versions up to 0.1.7. Public sources (NVD/Red Hat/Patchstack) confirm the CSRF flaw but do not provide exploit details or a confirmed fixed version. CVSS 3.1 score ...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in path-to-regexp-0.1.7.tgz
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of path-to-regexp-0.1.7.tgz Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By...
PT-2023-35513 · Bluetuith · Bluetuith
Name of the Vulnerable Software and Affected Versions: bluetuith versions prior to 0.1.7 bluetuith versions prior to 0.1.5 Description: The issue is related to a vulnerability in bluetuith that has been resolved by updating dependencies. The updates also include new features and bugfixes, such as...
CVE-2023-35110
An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
JJSON 缓冲区错误漏洞
JJSON is a pure Java library for handling JSON by Christian Grobmeier, a personal developer. A security vulnerability exists in JJSON version 0.1.7 and earlier. An attacker could exploit this vulnerability to cause a denial of service...
PT-2023-25150 · Jjson · Jjson
Name of the Vulnerable Software and Affected Versions: jjson versions 0.1.7 and earlier Description: An issue in jjson allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies or have deeply nested structures. Recommendations: For...
Camaleon CMS Insufficient Session Expiration vulnerability
Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Resolved in commit...
XXE Vulnerability in XMLBundle 0.1.7
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks...
GHSA-QVWF-W35M-6R95 XXE Vulnerability in XMLBundle 0.1.7
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks...
CamaleonCMS 代码问题漏洞
CamaleonCMS is an advanced RubyonRails-based dynamic content management system CMS from the CamaleonCMS team. A security vulnerability exists in Camaleon CMS versions 0.1.7 through 2.6.0, which stems from an issue with the software's password change control that does not terminate a user's active...
Rust Security Vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust multiqueue2 crate before 0.1.7, which stems from the fact that the non-Send type can be sent to a different thread, resulting in a data contention...
Queues allow non-Send types to be sent to other threads, allowing data races
Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior. The flaw was correcte...
Vault SSH Helper Validated IP Addresses Incorrectly
Summary vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host’s network interface was located, rather than the specific IP address assigned to that interface. Assigned CVE-2020-24359 and fixed in 0.1.7. Background...
GHSA-P7W2-MC6M-MFX2 Malicious Package in scroool
Version 0.1.7 of scroool contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate your...