46 matches found
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
ECHO-6161-7139-EE2F
Bulletin has no description...
PT-2026-4853
A flaw has been found in Totolink A8000RU 7.1cu.643 b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...
EUVD-2019-7139
Malware in sbrugna...
MAL-2025-7139 Malicious code in @crabas0npm/a-amet-molestiae-earum (npm)
The package @crabas0npm/a-amet-molestiae-earum was found to contain malicious code...
CVE-2025-7139 SourceCodester Best Salon Management System Update Customer Details Page edit-customer-detailed.php cross site scripting
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to...
CVE-2025-7139 SourceCodester Best Salon Management System Update Customer Details Page edit-customer-detailed.php cross site scripting
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to...
Linux Distros Unpatched Vulnerability : CVE-2016-7139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote...
CVE-2024-7139
creationtimestamp| type| source ---|---|--- 2024-12-19 20:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoostwznd27 2024-12-19 22:20:47+00:00| seen| https://t.me/cvedetector/13365...
CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...
CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...
CVE-2024-7139
The CVE-2024-7139 entry concerns Silicon Labs RS9116 Bluetooth SDK. The issue is caused by an unchecked buffer length in L2CAP processing, allowing a buffer overflow that triggers an assertion and leads to a temporary denial of service. The impact is a DoS, with a potential required hard reset to...
CVE-2024-7139 Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device...
CVE-2019-7139
creationtimestamp| type| source ---|---|--- 2024-05-04 07:34:12+00:00| seen| https://t.me/arpsyndicate/4919 2025-07-22 09:00:04+00:00| published-proof-of-concept| Telegram/qhX3xr89BIwKtdbCw4aj7nCv1kS1RppnrElOVH2el3Pmc 2025-08-03 21:02:27+00:00| seen|...
CVE-2023-7139
creationtimestamp| type| source ---|---|--- 2023-12-29 00:26:18+00:00| seen| https://t.me/ctinow/160256 2023-12-31 04:10:17+00:00| seen| https://t.me/arpsyndicate/2293 2024-01-03 08:16:57+00:00| seen| https://t.me/ctinow/162249 2024-01-20 09:16:37+00:00| seen| https://t.me/ctinow/170564...
CVE-2023-7139 code-projects Client Details System HTTP POST Request regester.php sql injection
A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...
Oracle Linux 8 : samba (ELSA-2023-7139)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7139 advisory. - resolves: rhbz2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz2154370 - Fix CVE-2022-38023 -...
RHEL 8 : samba (RHSA-2023:7139)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7139 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...