49 matches found
CVE-2026-7072
A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...
CVE-2026-7072 CodePanda Source canteen_management_system login.php sql injection
A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...
CVE-2026-7072 CodePanda Source canteen_management_system login.php sql injection
A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...
CVE-2025-7072
creationtimestamp| type| source ---|---|--- 2026-01-09 12:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbyhhsryoe2c 2026-01-09 13:06:01+00:00| seen| Telegram/opgf19ZN09lKMlReRuv4TvW7wrTvF7qnMgMw4geluJ9eZ0 2026-01-09 14:02:59+00:00| seen|...
MAL-2025-7072 Malicious code in @amber-team/social-content-ai-widget (npm)
The package @amber-team/social-content-ai-widget was found to contain malicious code...
Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-7072-2)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7072-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
Ubuntu: Security Advisory (USN-7072-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-7072
creationtimestamp| type| source ---|---|--- 2024-03-13 00:21:42+00:00| seen| https://t.me/ctinow/206299 2024-03-13 00:26:47+00:00| seen| https://t.me/ctinow/206302...
CVE-2023-7072
The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.68 via the 'getposts' REST API Endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including full draft...
CVE-2023-7072
CVE-2023-7072 affects the Post Grid Combo – 36+ Gutenberg Blocks WordPress plugin. All versions up to 2.2.68 expose sensitive data via the get_posts REST API endpoint, allowing unauthenticated access to full draft posts, password-protected posts, and passwords. The issue is an Information Exposur...
WordPress Post Grid and Gutenberg Blocks Plugin <= 2.2.68 is vulnerable to Sensitive Data Exposure
Software Post Grid and Gutenberg Blocks Type Plugin Vulnerable versions = 2.2.68 Fixed in 2.2.69 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7072 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 22574660ebb2 Credits Hung -mov...
Debian: Security Advisory (DLA-798-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2016-7072
An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and...
RHEL 8 : firefox (RHSA-2022:7072)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7072 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
Cross-site scripting XSS vulnerability in the errorAction method in the ActionController base class in the Extbase Framework in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6, when the Rewritten Property Mapper is enabled, allows remote attackers t...
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-7072
CVE-2016-7072 affects PowerDNS Authoritative Server pre-3.4.11 and 4.0.2, enabling remote, unauthenticated denial of service by opening many TCP connections that can exhaust file descriptors and terminate the process. Multiple connected sources confirm the issue and indicate remediation: upgradin...