42 matches found
ECHO-7145-EC7D-A2DC
Bulletin has no description...
EUVD-2018-9442
Malware in sbrugna...
CVE-2025-7145
ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...
CVE-2025-7145
CVE-2025-7145 concerns ThreatSonar Anti-Ransomware from TeamT5. The vulnerability is described as an OS Command Injection that allows remote attackers with intermediate privileges on the affected product to inject and execute arbitrary OS commands on the server, potentially gaining administrative...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Expat vulnerability (USN-7145-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7145-1 advisory. It was discovered that Expat did not properly handle its internal state when attempting to...
CVE-2024-7145
creationtimestamp| type| source ---|---|--- 2024-08-16 17:03:42+00:00| seen| https://t.me/cvedetector/3330...
WordPress JetElements For Elementor Plugin <= 2.6.20 is vulnerable to Local File Inclusion
Software JetElements For Elementor Type Plugin Vulnerable versions = 2.6.20 Fixed in 2.6.20.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-7145 Patch priority Low CVSS severity Low 7.5 Developer Crocoblock PSID f91f48f5ffcb Credits stealthcopter Required privilege...
CVE-2023-7145
creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:23+00:00| seen| https://t.me/ctinow/160291 2023-12-30 01:31:39+00:00| seen| https://t.me/cibsecurity/73864...
CVE-2023-7145
gopeak MasterLab versions up to 3.3.10 contain a SQL injection in the HTTP POST Request Handler, specifically in the sqlInject function of app/ctrl/Framework.php where tampering the pwd parameter enables injection. Confirmed details show exploitation has been disclosed. Practical impact is high: ...
CVE-2023-7145 gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection
A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been...
CVE-2020-7145
CVE-2020-7145 affects HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 (E0705P07). The vulnerability is a choosePerfView expression language injection in the beanName parameter handled by choosePerfView.xhtml, enabling remote code execution. Exploitation details in the ZDI advisory i...
CVE-2019-7145
CVE-2019-7145 corresponds to an out-of-bounds read in Adobe Acrobat and Adobe Reader. The vulnerability affects versions including 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and ear...
Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-18: CVE-2019-7145)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
CVE-2018-17695
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-17695
CVE-2018-17695 affects Foxit PhantomPDF (notably version 9.2.0.9297 and earlier per CNVD) where a use-after-free/memory misreference in the TextField username handling allows remote code execution. The flaw arises from not validating object existence before operations, enabling an attacker to run...
CVE-2017-7145
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
CVE-2017-7145
CVE-2017-7145 affects iOS before 11 in the Time component, specifically the Time Zone setting that may misuse location data. The Apple security content entry notes a permissions issue in the time zone handling process, addressed by modifying permissions. Connected references corroborate the issue...