@cognidesk/integration-ticketing-servicenow (>=0.0.4, <=0.0.6), @darthcav/ts-http-server (0.9.1) +16 more potentially affected by CVE-2026-7120 via @fastify/static (>=10.1.0, <=10.1.1)

@fastify/static NPM version =10.1.0, =0.0.4, =0.7.1, =3.1.17, =1.3.8, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =5.1.0, =6.5.2, =4.6.0, =4.8.4 and more Source cves: CVE-2026-7120 Source advisory: OSV:GHSA-8PVW-JCV7-9CMJ...

@cognidesk/integration-ticketing-servicenow (>=0.0.4, <=0.0.6), @darthcav/ts-http-server (0.9.1) +16 more potentially affected by CVE-2026-7120 via @fastify/static (>=10.1.0, <=10.1.1)

@fastify/static NPM version =10.1.0, =0.0.4, =0.7.1, =3.1.17, =1.3.8, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =5.1.0, =6.5.2, =4.6.0, =4.8.4 and more Source cves: CVE-2026-7120 Source advisory: SNYK:JS-FASTIFYSTATIC-18233800...

CVE-2026-7120

@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and including 10.1.1 are affected. An unauthenticated attacker can bypass allowedPath restrictions by requesting equivalent...

@12degrees/website-builder-www (>=0.2.0, <=0.11.0), @13w/local-rag (>=1.6.0, <=2.0.1) +2157 more potentially affected by CVE-2026-7120 via @fastify/static (>=5.0.0, <=10.1.1)

@fastify/static NPM version =5.0.0, =0.2.0, =1.6.0, =0.1.0, =0.1.0, =0.1.6, =1.0.0, =0.1.1, =0.4.0, =0.1.1, =1.0.0, =0.1.0-rc.1, =3.0.0, =2.0.0, =3.0.0, =3.46.1 and more Source cves: CVE-2026-7120 Source advisory: MEND:CVE-2026-7120...

CVE-2020-7120

A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a...

CVE-2019-7120

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2017-7120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes...

MAL-2025-7120 Malicious code in @billing-info/react (npm)

The package @billing-info/react was found to contain malicious code...

CVE-2025-7120

A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/checkavailability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7120

creationtimestamp| type| source ---|---|--- 2025-07-07 11:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lteoilzqtu2r...

CVE-2025-7120

A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/checkavailability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7120

Campcodes Complaint Management System 1.0 contains a SQL injection in the file /users/check_availability.php via the email parameter. The issue is exploitable remotely with no authentication, impacting confidentiality, integrity, and availability (high risk). The vulnerability is described across...

CVE-2025-7120 Campcodes Complaint Management System check_availability.php sql injection

A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/checkavailability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

Exploit for OS Command Injection in Raisecom Msg2300_Firmware

This is a PoC exploit for CVE-2024-7120, a vulnerability in an u...

Ubuntu: Security Advisory (USN-7120-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7120-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2024-7120

A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file listbaseconfig.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible...

CVE-2024-7120

creationtimestamp| type| source ---|---|--- 2024-07-26 07:58:21+00:00| seen| https://t.me/cvedetector/1667 2024-08-01 10:24:33+00:00| published-proof-of-concept| https://t.me/proxybar/2199 2024-08-01 13:53:33+00:00| published-proof-of-concept| https://t.me/HackerArsenal/92 2024-08-01...

CVE-2024-7120 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection

A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file listbaseconfig.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible...

CVE-2024-7120 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection

A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file listbaseconfig.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible...