48 matches found
CVE-2020-7154
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
EUVD-2021-7154
Malicious code in bioql PyPI...
CVE-2025-7154
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095B20200916/9.3.5u.6139B20201216. Affected by this issue is the function sub41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack ma...
CVE-2025-7154
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095B20200916/9.3.5u.6139B20201216. Affected by this issue is the function sub41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack ma...
CVE-2025-7154 TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095B20200916/9.3.5u.6139B20201216. Affected by this issue is the function sub41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack ma...
CVE-2024-7154
A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822B20200513. Affected is an unknown function of the file /wizard.html of the component Password Reset Handler. The manipulation leads to improper access controls. It is possible to launch the attack...
CVE-2024-7154
creationtimestamp| type| source ---|---|--- 2024-07-28 12:41:45+00:00| seen| https://t.me/cvedetector/1770...
CVE-2023-7154
The Hubbub Lite formerly Grow Social WordPress plugin before 1.32.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
CVE-2023-7154
The Hubbub Lite WordPress plugin (before 1.32.0) does not sanitize/escape certain settings, enabling Stored XSS by high-privilege admins even when unfiltered_html is disallowed (e.g., multisite). Versions prior to 1.32.0 are affected; remediation is to upgrade to 1.32.0 or later. Exploit evidence...
CVE-2023-7154 Hubbub Lite < 1.32.0 - Admin+ Stored XSS
The Hubbub Lite formerly Grow Social WordPress plugin before 1.32.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
SUSE: Security Advisory (SUSE-SU-2014:1732-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:1318-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7154
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7154
A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7154
CVE-2020-7154 affects HPE Intelligent Management Center (iMC) prior to 7.3 (PLAT E0705P07). The root cause is an expression language injection in the ifViewSelectPage.xhtml handling of the beanName parameter, allowing an attacker to execute arbitrary code on affected installations. Public sources...
CVE-2018-7154
CVE-2018-7154 is rejected/not used and does not represent an active vulnerability entry.
CVE-2019-7154
The CVE-2019-7154 issue affects Binaryen 1.38.22, specifically the main function in tools/wasm2js.cpp. The root cause is a heap-based buffer overflow caused by misusing Emscripten, which triggers an error in cashew::JSPrinter::printAst() within emscripten-optimizer/simple_ast.h. A crafted input c...
MacOS process_policy stack leak through uninitialized field(CVE-2017-7154)
The syscall processpolicyscope=PROCPOLICYSCOPEPROCESS, action=PROCPOLICYACTIONGET, policy=PROCPOLICYRESOURCEUSAGE, policysubtype=PROCPOLICYRUSAGECPU, attrp=, targetpid=0, targetthreadid= causes 4 bytes of uninitialized kernel stack memory to be written to userspace. The call graph looks as follow...
macOS process_policy Stack Leak
MacOS processpolicy stack leak through uninitialized field CVE-2017-7154 The syscall processpolicyscope=PROCPOLICYSCOPEPROCESS, action=PROCPOLICYACTIONGET, policy=PROCPOLICYRESOURCEUSAGE, policysubtype=PROCPOLICYRUSAGECPU, attrp=, targetpid=0, targetthreadid= causes 4 bytes of uninitialized kerne...