41 matches found
RockyLinux 9 : nginx (RLSA-2026:7002)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7002 advisory. nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file modification via...
CVE-2026-7002
A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...
CVE-2020-7002
Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file...
Samsung MagicINFO 9 Server Remote Code Execution (CVE-2024-7399)
Remote Code Execution in Samsung MagicINFO 9 Server use exploit/windows/http/magicinfo/traversal msf undefinedtraversal show actions ...actions... msf undefinedtraversal set ACTION msf undefinedtraversal show options ...show and set options... msf undefinedtraversal run class MetasploitModule...
RHEL 8 : kernel (RHSA-2024:7002)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7002 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: x86/xen: Add some null pointer...
Ubuntu: Security Advisory (USN-7002-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Setuptools vulnerability (USN-7002-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7002-1 advisory. It was discovered that setuptools was vulnerable to remote code execution. An attacker could possibly...
Malicious code in wlwz-2312-7002 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91a180812aa65636dc4f8d91254d835ca3d29888db6d7b6a763a9a273954f4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-7002
creationtimestamp| type| source ---|---|--- 2023-12-23 03:22:38+00:00| seen| https://t.me/ctinow/158687 2023-12-29 13:16:40+00:00| seen| https://t.me/ctinow/160489 2024-01-18 12:16:30+00:00| seen| https://t.me/ctinow/169680...
CVE-2023-7002
The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operati...
CVE-2023-7002
CVE-2023-7002 affects the WordPress plugin Backup Migration (backup-backup). It enables OS Command Injection via the url parameter in versions up to 1.3.9. Exploitation requires administrator-level privileges or higher, allowing arbitrary commands to run on the host. Current connected data indica...
CentOS 7 : java-1.8.0-openjdk (RHSA-2022:7002)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7002 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are...
Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:7002)
The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7002-1 advisory. - OpenJDK: excessive memory allocation in X.509 certificate parsing Security, 8286533 CVE-2022-21626 - OpenJDK: HttpServer no connection count...
Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2022-7002)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7002 advisory. 1:1.8.0.352.b08-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz21336...
CVE-2019-7002
CVE-2019-7002 entry is rejected/not used; withdrawn by CNA and not an active vulnerability entry.
CVE-2020-7002
Delta Electronics CNCSoft ScreenEditor (CNCSoft ScreenEditor, v1.00.96 and earlier) is affected by CVE-2020-7002. The Red Hat/NVD/ZDI/CISA entries describe multiple stack-based buffer overflows in parsing DPB input (and GIF-name related data in DPB parsing) that can be exploited by a valid user o...
Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion
Thomson Reuters Concourse Firm Central 2.13.0097 - Directory Traversal Local File Inclusion ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Date: 02/13/2019 Exploit Author: 0v3rride Vendor Homepage:...