CVE-2026-7153

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sysinfo results in os command injection. The attack can b...

CVE-2026-7153

creationtimestamp| type| source ---|---|--- 2026-04-27 21:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixneplf62t 2026-04-27 21:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkixp74yld2f...

CVE-2020-7153

A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2016-7153 vulnerabilities

Vulnerabilities for packages: firefox...

EUVD-2021-7153

Malicious code in bioql PyPI...

CVE-2025-7153 CodeAstro Simple Hospital Management System POST Parameter doctor.html cross site scripting

A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor.html of the component POST Parameter Handler. The manipulation of the argument First Name/Last name/Address leads ...

CVE-2025-7153

CodeAstro Simple Hospital Management System 1.0 is affected by a remote cross-site scripting (XSS) vulnerability in the POST Parameter Handler, triggered by manipulating the First Name, Last Name, or Address arguments in /doctor.html. The issue is exploitable remotely and has been disclosed publi...

CVE-2014-7153

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

CVE-2024-7153

creationtimestamp| type| source ---|---|--- 2024-07-28 00:59:17+00:00| seen| https://t.me/cvedetector/1761...

CVE-2024-7153

A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2023-7153

creationtimestamp| type| source ---|---|--- 2024-01-18 16:31:45+00:00| seen| https://t.me/ctinow/169812...

CVE-2023-7153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS. This issue affects Macro-Bel: before V.1.0.1...

CVE-2023-7153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS.This issue affects Macro-Bel: before V.1.0.1...

CVE-2023-7153 Reflected XSS in Macroturk's Macro-Bel

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS. This issue affects Macro-Bel: before V.1.0.1...

CVE-2023-7153 Reflected XSS in Macroturk's Macro-Bel

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS. This issue affects Macro-Bel: before V.1.0.1...

CVE-2023-7153

CVE-2023-7153 corresponds to a reflected XSS vulnerability in Macro-Bel, a product of MacroTurk Software and Internet Technologies. Affected component is the Macro-Bel web interface, with the root cause described as improper neutralization of input during web page generation. The issue is exploit...

SUSE: Security Advisory (SUSE-SU-2018:3387-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5806

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk...

CVE-2020-7153

creationtimestamp| type| source ---|---|--- 2020-10-19 22:52:29+00:00| seen| https://t.me/cibsecurity/15390...

CVE-2020-7153

CVE-2020-7153 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The issue is an iccselectdevtype expression language injection in iccSelectDevType handling, enabling remote code execution. Exploitation is remote (attack vector NETWORK) with no us...