CVE-2025-1207

A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The complexity of an attack is rather...

CVE-2025-1207 phjounin TFTPD64 DNS denial of service

A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The complexity of an attack is rather...

CVE-2025-1207 phjounin TFTPD64 DNS denial of service

A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The complexity of an attack is rather...

CVE-2025-1207

CVE-2025-1207 affects phjounin TFTPD64 4.64, specifically exploiting the DNS Handler component to cause a denial of service. The vulnerability allows local-network exploitation with relatively high complexity; public disclosure has occurred. Several sources corroborate an impact limited to availa...

Mageia: Security Advisory (MGASA-2025-0005)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2025-0005 Updated rizin packages fix security vulnerability

Command injection via RzBinInfo bclass due legacy code. CVE-2022-1207...

Updated rizin packages fix security vulnerability

Command injection via RzBinInfo bclass due legacy code. CVE-2022-1207...

rizin-0.7.4-1.1 on GA media (moderate)

rizin-0.7.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:14617-1 Rating: moderate Cross-References: CVE-2022-1207 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the rizin-0.7.4-1.1 packa...

Exploit for SQL Injection in Wpbookingcalendar Booking_Calendar

Booking Calendar = 9.9 - Unauthenticated SQL Injection CVE-2...

CVE-2024-1207

creationtimestamp| type| source ---|---|--- 2024-02-08 10:21:30+00:00| seen| https://t.me/ctinow/181264 2024-03-02 08:36:58+00:00| seen| https://t.me/ctinow/198272...

CVE-2024-1207 Booking Calendar <= 9.9 - Unauthenticated SQL Injection

The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendarrequestparamsdatesddmmyycsv' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

CVE-2024-1207

CVE-2024-1207 affects WP Booking Calendar for WordPress (versions up to 9.9). The vulnerability is an unauthenticated SQL Injection via the calendar_request_params[dates_ddmmyy_csv] parameter, caused by insufficient escaping and inadequate query preparation. Public disclosures (NVD and Red Hat) r...

Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Public exploits are available Vendor: Hitachi Energy Equipment: MicroSCADA Pro/X SYS600 Products Vulnerabilities: Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

CVE-2023-1207

creationtimestamp| type| source ---|---|--- 2023-05-15 16:46:07+00:00| seen| https://t.me/cibsecurity/64135 2025-01-24 21:05:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3034...

CVE-2023-1207

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...

CVE-2023-1207 HTTP Headers < 1.18.8 - Admin+ SQL Injection

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...

CVE-2023-1207

CVE-2023-1207 affects the HTTP Headers WordPress plugin, prior to version 1.18.8. The import feature can execute arbitrary SQL on the server, causing an SQL Injection vulnerability. Public sources (NVD/Red Hat/Patchstack) confirm the issue and indicate a patch: update to 1.18.8 or later to mitiga...

WordPress HTTP Headers Plugin < 1.18.8 is vulnerable to SQL Injection

Software HTTP Headers Type Plugin Vulnerable versions 1.18.8 Fixed in 1.18.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-1207 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID 4e6306d4524c Credits qerogramat Kakao Style Corp. Required privilege...

Debian: Security Advisory (DLA-1207-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2022-1207

Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary...