MiracleLinux 8 : librabbitmq-0.9.0-4.el8 (AXSA:2023-7127:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7127:02 advisory. rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 Tenable has extracted the preceding description block directly from the MiracleLinux...

CVE-2019-7127

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

MAL-2025-7127 Malicious code in @citrixgs/g11n-sdk-react (npm)

The package @citrixgs/g11n-sdk-react was found to contain malicious code...

CVE-2025-7127

creationtimestamp| type| source ---|---|--- 2025-07-07 15:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltf3y64yva2l...

CVE-2025-7127

CVE-2025-7127 affects itsourcecode Employee Management System up to v1.0, with a SQL injection in /admin/changepassword.php caused by unsafely handling the currentpassword parameter. Exploitation can be performed remotely; public disclosure is noted. Connected sources also suggest mitigations suc...

CVE-2025-7127 itsourcecode Employee Management System changepassword.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

CVE-2025-7127 itsourcecode Employee Management System changepassword.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

Linux Distros Unpatched Vulnerability : CVE-2016-7127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers ...

Ubuntu: Security Advisory (USN-7127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-7127

creationtimestamp| type| source ---|---|--- 2024-07-30 14:54:33+00:00| seen| https://t.me/cvedetector/2034...

CVE-2024-7127 XSS in Stackposts - Social Marketing Tool

Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cross-site Scripting XSS attack. By submitting the payload in the username during registration, it can be executed later in the application panel. This could lead to the unauthoris...

CVE-2024-7127 XSS in Stackposts - Social Marketing Tool

Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cross-site Scripting XSS attack. By submitting the payload in the username during registration, it can be executed later in the application panel. This could lead to the unauthoris...

CVE-2024-7127

CVE-2024-7127 describes an XSS flaw in Stackposts Social Marketing Tool caused by improper neutralization of input during web page generation. Submitting a payload in the username at registration can be executed later in the application panel, potentially leading to unauthorized disclosure of inf...

CVE-2023-7127

creationtimestamp| type| source ---|---|--- 2023-12-28 16:26:47+00:00| seen| https://t.me/ctinow/160092 2023-12-31 02:32:08+00:00| seen| https://t.me/arpsyndicate/2277 2024-01-05 19:17:27+00:00| seen| https://t.me/ctinow/163669...

CVE-2023-7127

The CVE-2023-7127 entry concerns code-projects Automated Voting System 1.0. The vulnerability affects the Login component where manipulation of the argument idno leads to SQL injection, as described in public disclosures. Exploitation information is present in the source materials, indicating a s...

CVE-2023-7127 code-projects Automated Voting System Login sql injection

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

K89002224: PHP vulnerability CVE-2016-7127

Security Advisory Description The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact by providing...

SUSE: Security Advisory (SUSE-SU-2016:2460-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...