45 matches found
CVE-2026-7096
A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgponloid results in os command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7096
creationtimestamp| type| source ---|---|--- 2025-07-06 22:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114808606240121494 2025-07-06 23:31:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltdgjmnp6j2q...
CVE-2024-7096
A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: SOAP admin services are accessible to the attacker. The...
CVE-2024-7096
creationtimestamp| type| source ---|---|--- 2025-05-30 15:11:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114597422241464112 2025-05-30 15:31:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkevjr6dc2 2025-05-30...
CVE-2024-7096 Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw
A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: SOAP admin services are accessible to the attacker. The...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenJDK 8 regressions (USN-7096-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7096-2 advisory. USN-7096-1 fixed vulnerabilities in OpenJDK 8. The update introduced several minor regressions. This updat...
Ubuntu: Security Advisory (USN-7096-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-7096
creationtimestamp| type| source ---|---|--- 2023-12-25 02:26:20+00:00| seen| https://t.me/ctinow/159115 2023-12-30 08:16:13+00:00| seen| https://t.me/ctinow/160784...
CVE-2023-7096 code-projects Faculty Management System crud.php sql injection
A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipulation of the argument fieldname/tablename causes sql injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2023-7096
CVE-2023-7096 affects code-projects Faculty Management System 1.0. The vulnerability is in /admin/php/crud.php where manipulation of the fieldname/tablename argument allows SQL injection. Exploitation can be remote and, per the published descriptions, the issue has been disclosed/public. The CVSS...
Oracle Linux 8 : python-cryptography (ELSA-2023-7096)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7096 advisory. 3.2.1-6 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable objects, resolves rhbz2172404 Tenable has extracted the preceding description block...
RHEL 8 : python-cryptography (RHSA-2023:7096)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7096 advisory. The python-cryptography packages contain a Python Cryptographic Authority's PyCA's cryptography library, which provides cryptographic primitives and...
CentOS 8 : python-cryptography (CESA-2023:7096)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:7096 advisory. - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept...
CVE-2019-7096
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2019-7096
creationtimestamp| type| source ---|---|--- 2019-05-23 17:48:18+00:00| seen| https://t.me/cvemitreorg/216...
CVE-2019-7096
Adobe Flash Player is affected by CVE-2019-7096 (use-after-free leading to arbitrary code execution) and CVE-2019-7108 (out-of-bounds read leading to information disclosure) in versions up to 32.0.0.156. Multiple connected advisories confirm the issues and recommend upgrading to 32.0.0.171 (or la...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Adobe Flash Player Within Google Chrome Security Update (APSB19-19) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...
April 2019 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB19-19: CVE-2019-7096, CVE-2019-7108...
KLA11465 Multiple vulnerabilities in Adobe Flash Player
Multiple vulnerabilities were found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Out-of-bounds read vulnerability can be exploited remotely to obtain sensitive...