154 matches found
MSC-2024-1207
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2024-1207
creationtimestamp| type| source ---|---|--- 2024-02-08 10:21:30+00:00| seen| https://t.me/ctinow/181264 2024-03-02 08:36:58+00:00| seen| https://t.me/ctinow/198272 2026-09-01 20:00:40+00:00| seen| https://t.me/hackingAttack/131048 2026-09-01 20:00:40+00:00| seen| https://t.me/hackingAttack/131047...
CVE-2024-1207
CVE-2024-1207 affects WP Booking Calendar for WordPress (versions up to 9.9). The vulnerability is an unauthenticated SQL Injection via the calendar_request_params[dates_ddmmyy_csv] parameter, caused by insufficient escaping and inadequate query preparation. Public disclosures (NVD and Red Hat) r...
CVE-2024-1207 Booking Calendar <= 9.9 - Unauthenticated SQL Injection
The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendarrequestparamsdatesddmmyycsv' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
Malware in wlwz-2312-1207
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Public exploits are available Vendor: Hitachi Energy Equipment: MicroSCADA Pro/X SYS600 Products Vulnerabilities: Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
CVE-2023-1207
creationtimestamp| type| source ---|---|--- 2023-05-15 16:46:07+00:00| seen| https://t.me/cibsecurity/64135 2025-01-24 21:05:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3034...
CVE-2023-1207
This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...
CVE-2023-1207 HTTP Headers < 1.18.8 - Admin+ SQL Injection
This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability...
CVE-2023-1207
CVE-2023-1207 affects the HTTP Headers WordPress plugin, prior to version 1.18.8. The import feature can execute arbitrary SQL on the server, causing an SQL Injection vulnerability. Public sources (NVD/Red Hat/Patchstack) confirm the issue and indicate a patch: update to 1.18.8 or later to mitiga...
WordPress HTTP Headers Plugin < 1.18.8 is vulnerable to SQL Injection
Software HTTP Headers Type Plugin Vulnerable versions 1.18.8 Fixed in 1.18.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-1207 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID 4e6306d4524c Credits qerogramat Kakao Style Corp. Required privilege...
Debian: Security Advisory (DLA-1207-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2022-1207
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary...
MSC-2022-1207
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...
CVE-2022-1207
creationtimestamp| type| source ---|---|--- 2022-04-01 22:19:50+00:00| seen| https://t.me/cibsecurity/40016...
CVE-2022-1207
CVE-2022-1207 (radare2) has concrete technical details in the connected documents: an out-of-bounds read in radare2 prior to v5.6.8. The issue arises when a buffer is allocated with size bb->size and data is read into buf; later, pos = opaddr - bb->addr is added to the pointer before callin...
CVE-2022-1207 Out-of-bounds read in radareorg/radare2
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary...
SUSE: Security Advisory (SUSE-SU-2019:1207-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2019:1207-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...