182 matches found
CVE-2026-1197
creationtimestamp| type| source ---|---|--- 2026-01-20 02:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mct526bg2n2i...
CVE-2025-15061
creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1197/ 2026-01-23 14:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3udvkxxc2g...
Linux Distros Unpatched Vulnerability : CVE-2011-1197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a denial of service or possibly have...
NewStart CGSL MAIN 7.02 : cpio Vulnerability (NS-SA-2025-0164)
The remote NewStart CGSL host, running version MAIN 7.02, has cpio packages installed that are affected by a vulnerability: - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Note...
CVE-2013-1197
The XML parser in the server in Cisco Unified Presence CUP allows remote authenticated users to cause a denial of service jabberd daemon crash via crafted XML content in an XMPP message, aka Bug ID CSCue13912...
Linux Distros Unpatched Vulnerability : CVE-2015-1197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive...
Linux Distros Unpatched Vulnerability : CVE-2010-1197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both Content-Disposition:...
CVE-2025-1197
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/loaduser-profile.php. The manipulation of the argument userhash leads to sql injection. The attack c...
CVE-2025-1197
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/loaduser-profile.php. The manipulation of the argument userhash leads to sql injection. The attack c...
CVE-2025-1197
creationtimestamp| type| source ---|---|--- 2025-02-12 12:35:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113990941791374167 2025-02-12 13:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyayivz752d 2025-02-14 10:04:59+00:00| seen|...
CVE-2025-1197
Vulnerability: CVE-2025-1197 affects code-projects Real Estate Property Management System 1.0. Root cause: SQL injection via manipulated parameter userhash in the file /_parse/load_user-profile.php. Impact: confidentiality affected (high in CVSS 3.1), with broader concern for remote exploitation;...
CVE-2025-1197 code-projects Real Estate Property Management System load_user-profile.php sql injection
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/loaduser-profile.php. The manipulation of the argument userhash leads to sql injection. The attack c...
CVE-2024-1197
A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...
RHEL 9 : cpio (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cpio: directory traversal through symlinks CVE-2015-1197 - cpio: path traversal vulnerability CVE-2023-72...
RHEL 7 : cpio (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cpio: directory traversal through symlinks CVE-2015-1197 - cpio: out of bounds write CVE-2016-2037 Note...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2024-1425)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2024-1397)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.11.0 : cpio (EulerOS-SA-2024-1425)
According to the versions of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a...
RHSA-2024:1197
creationtimestamp| type| source ---|---|--- 2024-03-06 19:17:16+00:00| seen| https://t.me/ctinow/201671...
Amazon Linux 2023 : cpio (ALAS2023-2024-557)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-557 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Tenable has extracted the preceding...