shellshocker-pocs

Shellshocker - Repositorio de código de prueba de concepto de "Shellshock" Colección de Pruebas de Concepto y objetivos potenciales para ShellShocker Enlace de Wikipedia: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Por favor, envía un pull request...

CVE-2026-7187

creationtimestamp| type| source ---|---|--- 2026-07-28 15:05:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpopepcn72s 2026-07-28 16:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrprt6dsa32c...

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2025-7187 code-projects Chat System fetch_member.php sql injection

A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetchmember.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

Linux Distros Unpatched Vulnerability : CVE-2014-7187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2018-7187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The go get implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path get/vcs.go only checks for :// anywhere...

CVE-2024-7187

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-7187

creationtimestamp| type| source ---|---|--- 2024-07-29 09:36:07+00:00| seen| https://t.me/cvedetector/1817...

RHEL 7 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: arbitrary command execution via VCS path CVE-2018-7187 - golang: malformed hosts in URLs leads to...

CVE-2023-7187

creationtimestamp| type| source ---|---|--- 2023-12-31 15:26:25+00:00| seen| https://t.me/ctinow/161113 2024-01-01 01:32:09+00:00| seen| https://t.me/cibsecurity/74069 2024-01-22 08:36:18+00:00| seen| https://t.me/ctinow/171024...

CVE-2023-7187

The CVE-2023-7187 entry affects Totolink N350RT (v9.3.5u.6139_B20201216) where the HTTP POST Request Handler at /cgi-bin/cstecgi.cgi?action=login&flag=ie8 can trigger a stack-based buffer overflow in a vulnerable component. Publicly disclosed exploit and advisories indicate high severity with pot...

CVE-2023-7187 Totolink N350RT HTTP POST Request stack-based overflow

A vulnerability was found in Totolink N350RT 9.3.5u.6139B20201216. It has been rated as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. Th...

Rocky Linux 8 : procps-ng (RLSA-2023:7187)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:7187 advisory. - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimited amounts of...

Oracle Linux 8 : procps-ng (ELSA-2023-7187)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7187 advisory. - CVE-2023-4016: ps: possible buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 8 : procps-ng (RHSA-2023:7187)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7187 advisory. The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top,...

Security Bulletin: IBM System Networking Products not affected by the Bash vulnerabilities (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, and CVE-2014-6278)

Summary IBM System Networking Products are not vulnerable to the Bash vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and the two memory corruption vulnerabilities. Vulnerability Details Abstract IBM System Networking Products are not vulnerable to the Bash vulnerabilitie...

Security Bulletin: Vulnerabilities in bash affect SAN Volume Controller and Storwize Family (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Security Bulletin: Vulnerabilities in Bash affect SAN Volume Controller and Storwize Family CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278 Vulnerability Details Security Bulletin --- Summary --- Six Bash vulnerabilities were disclosed in September...

Debian: Security Advisory (DLA-63-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2017-7187

The sgioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via a large command size in an SGNEXTCMDLEN ioctl call, leading to out-of-bounds write access in the...

Important: Red Hat Security Advisory: device-mapper-multipath security update

An update for device-mapper-multipath is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...