Lucene search
K

59 matches found

Circl
Circl
added yesterday3 views

CVE-2026-7198

creationtimestamp| type| source ---|---|--- 2026-06-03 01:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndvucat4n2n...

9.8CVSS5.8AI score0.00084EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-7198 Malicious code in @crabas0npm/blanditiis-officia-unde (npm)

The package @crabas0npm/blanditiis-officia-unde was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2025/07/08 10:15 p.m.3 views

CVE-2025-7198

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

9.8CVSS0.00204EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/07/08 10:2 p.m.3 views

CVE-2025-7198 code-projects Jonnys Liquor admin-area.php sql injection

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

7.5CVSS7.8AI score0.00204EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/07/08 10:2 p.m.7 views

CVE-2025-7198 code-projects Jonnys Liquor admin-area.php sql injection

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/07/08 10:2 p.m.14 views

CVE-2025-7198

CVE-2025-7198 affects Jonnys Liquor 1.0; vulnerability in the /admin/admin-area.php file where the drink parameter is susceptible to SQL injection. Exploitation can be remote and public disclosures exist. Connected reports consistently describe an SQL injection in the same parameter/file. No conc...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:0 a.m.13 views

Qnap QuTS hero Command Injection (CVE-2019-7198)

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

9.8CVSS8.4AI score0.03068EPSS
Exploits0References2
Circl
Circl
added 2024/07/29 3:27 p.m.0 views

CVE-2024-7198

creationtimestamp| type| source ---|---|--- 2024-07-29 15:27:20+00:00| seen| https://t.me/cvedetector/1841...

8.8CVSS6.2AI score0.00197EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/07/29 12:0 p.m.20 views

CVE-2024-7198 SourceCodester Complaints Report Management System manage_station.php sql injection

A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admin/managestation.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The explo...

6.5CVSS0.00197EPSS
Exploits1References4
Circl
Circl
added 2024/02/27 10:26 a.m.0 views

CVE-2023-7198

creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:12+00:00| seen| https://t.me/ctinow/194186 2025-03-24 20:23:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8526...

4.3CVSS4.8AI score0.00116EPSS
Exploits2References2
NVD
NVD
added 2024/02/27 9:15 a.m.8 views

CVE-2023-7198

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References IDOR in postid= parameter. Authenticated users are able to delete private notes associated with different user accounts. This poses a significant security risk as it violates the principle of...

4.3CVSS6.3AI score0.00116EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/02/27 8:30 a.m.11 views

CVE-2023-7198 WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References IDOR in postid= parameter. Authenticated users are able to delete private notes associated with different user accounts. This poses a significant security risk as it violates the principle of...

6.6AI score0.00116EPSS
Exploits2References1
CVE
CVE
added 2024/02/27 8:30 a.m.9154 views

CVE-2023-7198

The WP Dashboard Notes WordPress plugin (versions

4.3CVSS6.5AI score0.00116EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2024/02/27 12:0 a.m.12 views

WordPress WP Dashboard Notes Plugin < 1.0.11 is vulnerable to Insecure Direct Object References (IDOR)

Software WP Dashboard Notes Type Plugin Vulnerable versions 1.0.11 Fixed in 1.0.11 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-7198 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 493c887865e6 Credits Pedro Cuco...

6.5AI score0.00116EPSS
Exploits2References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:14 a.m.0 views

SUSE CVE-2015-7198

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted texture data...

7.5CVSS7.7AI score0.03921EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2015:1981-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2015:1978-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2015:1926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
Circl
Circl
added 2020/12/10 7:33 a.m.1 views

CVE-2019-7198

creationtimestamp| type| source ---|---|--- 2020-12-10 07:33:35+00:00| seen| https://t.me/cibsecurity/18562 2020-12-10 07:36:35+00:00| seen| https://t.me/cibsecurity/18582 2020-12-10 08:25:34+00:00| seen| https://t.me/cibsecurity/18602 2020-12-10 09:25:22+00:00| seen| https://t.me/cibsecurity/186...

9.8CVSS7.3AI score0.03068EPSS
Exploits0References19
CVE
CVE
added 2020/12/10 3:34 a.m.65 views

CVE-2019-7198

CVE-2019-7198 is a remote command-injection vulnerability in QNAP QTS and QuTS hero. Affected products include QuTS hero and QTS with fixed versions: QuTS hero h4.5.1.1472 build 20201031 and later; QTS 4.5.1.1456 build 20201015 and later; QTS 4.4.3.1354 build 20200702 and later. Public sources (N...

9.8CVSS9.9AI score0.03068EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder