70 matches found
CVE-2026-7128
A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savetype. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has...
CVE-2026-7128 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savetype. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has...
CVE-2019-7128
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2025-7128
A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2013-7128
Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.17.29 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...
Linux Distros Unpatched Vulnerability : CVE-2016-7128
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file...
CVE-2024-7128
creationtimestamp| type| source ---|---|--- 2024-07-26 17:11:50+00:00| seen| https://t.me/cvedetector/1686 2025-03-11 23:40:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7255 2025-05-15 01:32:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16436...
CVE-2024-7128
A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...
CVE-2024-7128 Openshift-console: unauthenticated data exposure
A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...
CVE-2024-7128 Openshift-console: unauthenticated data exposure
A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...
CVE-2023-7128
creationtimestamp| type| source ---|---|--- 2023-12-28 16:26:49+00:00| seen| https://t.me/ctinow/160093 2023-12-31 01:48:51+00:00| seen| https://t.me/arpsyndicate/2269 2024-01-05 19:17:26+00:00| seen| https://t.me/ctinow/163668 2024-01-20 08:07:16+00:00| seen| https://t.me/ctinow/170552...
CVE-2023-7128 code-projects Voting System Admin Login sql injection
A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...
CVE-2023-7128
CVE-2023-7128 affects code-projects Voting System 1.0, specifically the Admin Login component’s /admin/ path. The issue arises from manipulating the username argument, resulting in SQL injection in an unknown processing flow of the Admin Login. Public disclosure exists. The CVSS data in the sourc...
Rocky Linux 8 : postgresql:12 (RLSA-2022:7128)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7128 advisory. - A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait fo...
Oracle Linux 8 : postgresql:12 (ELSA-2022-7128)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7128 advisory. postgresql 12.12-1 - Resolves: 2131177 - Update to version 12.12 Tenable has extracted the preceding description block directly from the Oracle Linux security...
RHEL 8 : postgresql:12 (RHSA-2022:7128)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7128 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Extension scripts replace objects not...
CentOS 8 : postgresql:12 (CESA-2022:7128)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7128 advisory. - postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 Note that Nessus has not tested for this issue but has instead...
SUSE: Security Advisory (SUSE-SU-2016:2408-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2460-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...