271 matches found
CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection
A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...
MiracleLinux 3 : ruby-1.8.5-5.1.1AXS3 (AXSA:2008-86:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-86:01 advisory. Ruby is an interpreted scripting language for quick and easy object-oriented programming. CVE 2008-2662: Multiple integer overflows in the...
CVE-2022-2663 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-vmware...
CVE-2019-2663
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated...
EUVD-2023-35855
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-2663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.04 and earlier, a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. CVE-2023-2663 Note that Nessus relies on th...
CVE-2025-2663
creationtimestamp| type| source ---|---|--- 2025-03-24 00:00:33+00:00| seen| https://t.me/cvedetector/20922 2025-03-24 00:19:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3ibwbvil2l...
CVE-2025-2663 PHPGurukul Bank Locker Management System search-locker-details.php sql injection
A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be...
CVE-2025-2663
CVE-2025-2663 affects PHPGurukul Bank Locker Management System 1.0. Affected is an unknown functionality in /search-locker-details.php where manipulating the searchinput enables SQL injection. The vulnerability is exploitable remotely and the exploit has been disclosed publicly. The impact is des...
CVE-2025-2663 PHPGurukul Bank Locker Management System search-locker-details.php sql injection
A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be...
Linux Distros Unpatched Vulnerability : CVE-2022-2663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able ...
Linux Distros Unpatched Vulnerability : CVE-2012-2663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - extensions/libxttcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewa...
Amazon Linux 2 : qt5-qtsvg (ALAS-2024-2663)
The version of qt5-qtsvg installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2663 advisory. An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through...
GLSA-202409-25 : Xpdf: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202409-25 Xpdf: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Xpdf. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...
openSUSE Security Advisory (SUSE-SU-2024:2663-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:2663-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-2663
creationtimestamp| type| source ---|---|--- 2024-04-30 13:51:02+00:00| seen| Telegram/fnOrQI7m7N13wNXpPoWGj154wTJaACG-36Wjkj8vyISvTdZp...
CVE-2024-2663 ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $GET'image' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...
CVE-2024-2663
CVE-2024-2663 : ZD YouTube FLV Player plugin for WordPress is affected. All versions up to 1.2.6 are vulnerable to Server-Side Request Forgery via the $_GET['image'] parameter. This SSRF allows unauthenticated attackers to issue web requests from the vulnerable web application to arbitrary destin...
WordPress ZD YouTube FLV Player Plugin <= 1.2.6 is vulnerable to Server Side Request Forgery (SSRF)
Software ZD YouTube FLV Player Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-2663 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 49305c6b35a4 Credits Mike Required privile...