63 matches found
MAL-2025-7129 Malicious code in @clickhouse-team/clickhouse-backups-plugin (npm)
The package @clickhouse-team/clickhouse-backups-plugin was found to contain malicious code...
CVE-2025-7129
A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteemployeeattendancesingle. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...
CVE-2025-7129 Campcodes Payroll Management System ajax.php sql injection
A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteemployeeattendancesingle. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...
CVE-2024-7129
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins...
CVE-2020-7129
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...
Linux Distros Unpatched Vulnerability : CVE-2016-7129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The phpwddxprocessdata function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service segmentation...
Ubuntu: Security Advisory (USN-7129-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-7129
creationtimestamp| type| source ---|---|--- 2024-09-13 08:45:33+00:00| seen| https://t.me/cvedetector/5539...
CVE-2024-7129 Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins...
CVE-2024-7129 Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE
The Appointment Booking Calendar WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injection which further exploited can result to remote code Execution by high privilege such as admins...
WordPress Simply Schedule Appointments Plugin < 1.6.7.43 is vulnerable to Remote Code Execution (RCE)
Software Simply Schedule Appointments Type Plugin Vulnerable versions 1.6.7.43 Fixed in 1.6.7.43 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-7129 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 85c7bead9303 Credits Jeewan Kumar Bhatta...
CVE-2023-7129
creationtimestamp| type| source ---|---|--- 2023-12-28 17:26:27+00:00| seen| https://t.me/ctinow/160122 2023-12-31 02:43:39+00:00| seen| https://t.me/arpsyndicate/2279 2024-01-04 23:16:43+00:00| seen| https://t.me/ctinow/163288 2024-01-20 08:07:17+00:00| seen| https://t.me/ctinow/170553...
CVE-2023-7129
The CVE-2023-7129 entry relates to code-projects Voting System 1.0, specifically a vulnerability in the Voters Login function that allows SQL injection by manipulating the voter argument. The vulnerability is described as critical with a public exploit disclosure. Exploitation status is noted in ...
CVE-2023-7129 code-projects Voting System Voters Login sql injection
A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...
Rocky Linux 8 : git-lfs (RLSA-2022:7129)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7129 advisory. - A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a...
Oracle Linux 8 : git-lfs (ELSA-2022-7129)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7129 advisory. 2.13.3-3 - Rebuild with new Golang - Resolves: rhbz2131795 Tenable has extracted the preceding description block directly from the Oracle Linux securit...
RHEL 8 : git-lfs (RHSA-2022:7129)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7129 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...
SUSE: Security Advisory (SUSE-SU-2016:2460-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2408-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2460-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...