CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...

Edimax IC-7100 IP Camera

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send specially crafted requests to achieve remote code execution on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

PT-2025-9719

Name of the Vulnerable Software and Affected Versions: Edimax IC-7100 Description: The Edimax IC-7100 IP camera is vulnerable to a command injection flaw that allows for remote code execution. This vulnerability is actively exploited by Mirai-based botnets, beginning in May 2024, leveraging defau...

Ubuntu: Security Advisory (USN-7100-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-7100

creationtimestamp| type| source ---|---|--- 2024-07-30 09:53:06+00:00| seen| https://t.me/cvedetector/1996...

CVE-2024-7100

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btbbbutton shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-7100 Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btbbbutton shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-7100 Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btbbbutton shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

WordPress Bold Page Builder Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Bold Page Builder Type Plugin Vulnerable versions = 5.0.2 Fixed in 5.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7100 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f5334ea3844c Credits Arkadiusz Hydzik...

Malicious code in wlwz-2312-7100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d122fcf9d844d0750d5b9f417dc03ea3f03e16387655de0ee8692050b506c040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-809 Malicious code in wlwz-2312-7100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d122fcf9d844d0750d5b9f417dc03ea3f03e16387655de0ee8692050b506c040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-7100

creationtimestamp| type| source ---|---|--- 2023-12-25 04:21:56+00:00| seen| https://t.me/ctinow/159128 2023-12-25 08:56:49+00:00| seen| https://t.me/ctinow/159166 2023-12-29 13:16:38+00:00| seen| https://t.me/ctinow/160488...

CVE-2023-7100

The CVE-2023-7100 entry describes a SQL injection in PHPGurukul’s Restaurant Table Booking System 1.0, stemming from an unknown function in /admin/bwdates-report-details.php. The vulnerability is triggered by manipulating the fdate (and tdate) parameter(s), allowing remote attacker access. Public...

ManageEngine ADAudit Plus < Build 7100 XSS

The ManageEngine ADAudit Plus running on the remote host is prior to build 7100. It is, therefore affected by a cross-site scripting XSS vulnerability. An attacker can inject malicious Javascript into the username field of the product which will be executed when reports are loaded by an authorize...

Vulnerability fixed in Zoho ManageEngine ADAudit Plus

Zoho has fixed a vulnerability in ManageEngine ADAudit Plus. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the victim's browser and potentially allows the malicious party able to gain access to...

Zoho ManageEngine ADAudit Plus 跨站脚本漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, prove compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7100 that stems from a cross-site scripting attack via the username field...

CVE-2023-37308

Product : Zoho ManageEngine ADAudit Plus. Vulnerability : Cross-site Scripting (XSS) via the username field in builds prior to 7100 . Root cause / impact : Malicious JavaScript could be executed when authorized users load reports. Affected versions : ADAudit Plus before 7100. Remediation : Upgrad...

animation-directive (>=1.0.0 <=1.1.1), lrc-common (=1.1.1) +1 more potentially affected by unknown CVE via webpack-cil (=0.0.1-security)

webpack-cil NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpack-cil and may be impacted: - animation-directive =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7100...

Mageia: Security Advisory (MGASA-2014-0171)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...