73 matches found
CVE-2026-7146 AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery
A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...
CVE-2026-7146
CVE-2026-7146 affects AlejandroArciniegas mcp-data-vis (up to commit de5a51525a69822290eaee569a1ab447b490746d). The vulnerability targets the function axios in the file src/servers/web-scraper/server.js of the HTTP Request Handler component, enabling server-side request forgery . The description ...
MAL-2025-7146 Malicious code in @crabas0npm/accusamus-eaque-alias-ipsa (npm)
The package @crabas0npm/accusamus-eaque-alias-ipsa was found to contain malicious code...
CVE-2025-7146
creationtimestamp| type| source ---|---|--- 2025-07-08 02:14:22+00:00| seen| Telegram/B2a4VHYJt4rGdV8YxDPUuglrokLPzS4zEjyzDoBq7GaJuCc...
CVE-2024-7146
creationtimestamp| type| source ---|---|--- 2024-08-16 13:43:05+00:00| seen| https://t.me/cvedetector/3328...
CVE-2024-7146 JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
The JetTabs for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.3 via the 'switcherpreset' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files ...
CVE-2024-7146 JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
The JetTabs for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.3 via the 'switcherpreset' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files ...
WordPress JetTabs Plugin <= 2.2.3 is vulnerable to Local File Inclusion
Software JetTabs Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.3.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-7146 Patch priority Low CVSS severity Low 7.5 Developer Crocoblock PSID 3cf3db0c539a Credits stealthcopter Required privilege Contributor Published...
CVE-2016-7146
creationtimestamp| type| source ---|---|--- 2024-05-02 21:00:52+00:00| seen| https://t.me/arpsyndicate/4899...
CVE-2023-7146
creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:27+00:00| seen| https://t.me/ctinow/160292 2024-02-05 20:15:07+00:00| seen| https://t.me/cibsecurity/73865...
CVE-2023-7146 gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection
A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...
CVE-2023-7146
CVE-2023-7146 affects gopeak MasterLab up to version 3.3.10, specifically the HTTP POST Request Handler’s function sqlInjectDelete in app/ctrl/framework/Feature.php. The vulnerability arises from manipulation of the phone argument, enabling SQL injection. Public exploitation of this issue has bee...
BELL-CVE-2019-7146 CVE-2019-7146 does not affect BellSoft software
Bulletin has no description...
Debian: Security Advisory (DLA-717-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2019-7146
In elfutils 0.175, there is a buffer over-read in the eblobjectnote function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf...
RHEL 7 : kernel (RHSA-2022:7146)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7146 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: a use-after-free in clsroute filter...
SUSE: Security Advisory (SUSE-SU-2022:2614-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for dwarves (SUSE-SU-2022:2614-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15: dwarves / elfutils / elfutils-lang / libasm-devel / libasm1 / etc (SUSE-SU-2022:2614-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2614-1 advisory. elfutils was updated to version 0.177 jscSLE-24501: - elfclassify: New tool to analyze ELF...
