CVE-2026-6907 vulnerabilities

Vulnerabilities for packages: py3-django...

CVE-2026-6907 vulnerabilities

Vulnerabilities for packages: authentik, py3-django, authentik-fips...

python311-Django4-4.2.30-2.1 on GA media (moderate)

python311-Django4-4.2.30-2.1 on GA media Announcement ID: openSUSE-SU-2026:10708-1 Rating: moderate Cross-References: CVE-2026-35192 CVE-2026-5766 CVE-2026-6907 CVSS scores: CVE-2026-35192 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-35192 SUSE : 2.3...

CVE-2026-6907

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

CVE-2026-6907

creationtimestamp| type| source ---|---|--- 2026-05-05 15:44:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jpaa4lk2m...

CVE-2026-6907

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

CVE-2026-6907 Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

UBUNTU-CVE-2026-6907

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-6907)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6907 advisory. - Resolves: RHEL-157877 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves:...

RHEL 8 : nginx:1.24 (RHSA-2026:6907)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6907 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

Exploit for SQL Injection in Anisha Car_Rental_System

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Aut...

CVE-2025-6907

creationtimestamp| type| source ---|---|--- 2025-06-30 13:08:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19928 2025-06-30 17:21:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstp3c4l3v2r 2025-07-04 21:00:04+00:00| published-proof-of-concept|...

CVE-2025-6907

The CVE-2025-6907 entry affects code-projects Car Rental System 1.0 and is tied to a SQL injection in /book_car.php via the fname parameter. Multiple sources confirm remote exploitation and public disclosure of the exploit, including a GitHub SQLi tool targeting the Car Rental System. Some refere...

CVE-2025-6907 code-projects Car Rental System book_car.php sql injection

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /bookcar.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-6907

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file sort.php. The manipulation of the argument sort leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2024-6907

creationtimestamp| type| source ---|---|--- 2024-07-19 12:51:57+00:00| seen| https://t.me/cvedetector/1209...

CVE-2024-6907

CVE-2024-6907 affects SourceCodester Record Management System 1.0, specifically the sort.php file where manipulation of the sort argument enables cross-site scripting (XSS). The vulnerability can be triggered remotely and has been disclosed publicly. Connected sources provide concrete details: vu...

Malicious code in wlwz-2312-6907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 951416c5b0286df301b1ebb8dfbc710b30bfccab2e25b169a3addf325b5018eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-176 Malicious code in wlwz-2311-6907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c863438ea0ebc563c96600add848dd0022187209efc75f264d2416169a3e1c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-6907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c863438ea0ebc563c96600add848dd0022187209efc75f264d2416169a3e1c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...