Lucene search
K

77 matches found

Circl
Circl
added 2026/04/28 12:30 p.m.1 views

CVE-2026-7243

creationtimestamp| type| source ---|---|--- 2026-04-28 12:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116482338362194303 2026-04-28 12:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkklmuu4fh26...

10CVSS8.7AI score0.01221EPSS
Exploits0References2
NVD
NVD
added 2026/04/28 9:16 a.m.1 views

CVE-2026-7243

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. The affected element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument maxRtrAdvInterval leads to os command injection. It is possible to initiate the...

10CVSS0.01221EPSS
Exploits0References5
OSV
OSV
added 2026/01/29 12:47 a.m.1 views

CGA-929Q-7243-GX3H

Bulletin has no description...

5.3CVSS5.8AI score0.00326EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 3 : php-5.1.6-44.0.1.AXS3 (AXSA:2014-322:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-322:02 advisory. PHP is an HTML-embedded scripting language that allows developers to write dynamically generated web pages. PHP is ideal for writing database-enabled...

6.8CVSS8AI score0.4176EPSS
Exploits45References3
OSV
OSV
added 2025/11/20 10:19 a.m.1 views

MINI-7243-W8M9-MG7C

Bulletin has no description...

5.5CVSS6.9AI score0.00052EPSS
Exploits0
OSV
OSV
added 2025/07/21 8:15 p.m.0 views

CVE-2025-7243

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS6.3AI score
Exploits0References1
CVE
CVE
added 2025/07/21 7:55 p.m.14 views

CVE-2025-7243

IrfanView CADImage Plugin contains a memory corruption/ buffer overflow vulnerability in DWG file parsing that can lead to remote code execution. The flaw arises from inadequate validation of DWG data, allowing an attacker to execute code in the process context after a user opens a malicious DWG ...

7.8CVSS8.1AI score0.00185EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/21 7:55 p.m.3 views

CVE-2025-7243 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS8.1AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/21 7:55 p.m.4 views

CVE-2025-7243 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00185EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/07/03 12:0 a.m.1 views

AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2025:7243)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7243 advisory. gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference CVE-2024-47542 gstreamer1-plugins-base: GStreamer has an out-of-boun...

9.1CVSS7.1AI score0.00377EPSS
Exploits2References6
RedhatCVE
RedhatCVE
added 2025/05/22 4:47 p.m.4 views

CVE-2020-7243

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. In some cases, authentication can be achieved with the comtech password for the comtech account...

9CVSS8.1AI score0.05834EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.35 views

RHEL 4 : php (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - php: paths with NULL character were considered valid CVE-2006-7243 - php: XSLT file writing vulnerability...

7.5CVSS7.8AI score0.07535EPSS
Exploits9References9
Circl
Circl
added 2024/03/01 10:31 p.m.1 views

CVE-2023-7243

creationtimestamp| type| source ---|---|--- 2024-03-01 22:31:36+00:00| seen| https://t.me/ctinow/198032 2024-03-01 22:31:45+00:00| seen| https://t.me/ctinow/198041 2024-03-07 18:20:05+00:00| seen| https://t.me/truesecator/5502 2024-03-13 08:07:10+00:00| seen| https://t.me/ctinow/206448...

9.8CVSS7.3AI score0.0016EPSS
Exploits0References4
OSV
OSV
added 2024/03/01 9:15 p.m.1 views

CVE-2023-7243

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

9.8CVSS6AI score0.0016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/01 8:16 p.m.12 views

CVE-2023-7243 Ethercat Zeek Plugin Out-of-bounds Write

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

9.8CVSS7.3AI score0.0016EPSS
Exploits0References1
CVE
CVE
added 2024/03/01 8:16 p.m.84 views

CVE-2023-7243

CVE-2023-7243 affects the ICSNPP – Ethercat Zeek Plugin for Zeek, specifically versions d78dda6 and prior. The root cause is an out-of-bounds write during Ethercat datagram analysis, which the connected sources describe as enabling arbitrary code execution. Public disclosures and ICS advisories (...

9.8CVSS9.6AI score0.0016EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/01 8:16 p.m.9 views

CVE-2023-7243 Ethercat Zeek Plugin Out-of-bounds Write

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

9.8CVSS9.7AI score0.0016EPSS
Exploits0References1
Circl
Circl
added 2023/12/04 4:22 a.m.1 views

CVE-2016-7243

creationtimestamp| type| source ---|---|--- 2023-12-04 04:22:24+00:00| seen| https://t.me/arpsyndicate/1112 2023-12-04 04:22:24+00:00| seen| https://t.me/arpsyndicate/1112 2025-02-06 02:42:30+00:00| seen| Telegram/psXgTuU25g9o9GoDdIyB333kYaHa7QQX9pbMSZsyM82keh 2025-02-14 10:00:28+00:00| seen|...

7.6CVSS7.1AI score0.13529EPSS
Exploits11References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.2 views

SUSE CVE-2006-7243

PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the fileexists function...

5CVSS7AI score0.02287EPSS
Exploits2References8
Circl
Circl
added 2020/01/21 1:37 a.m.0 views

CVE-2020-7243

creationtimestamp| type| source ---|---|--- 2020-01-21 01:37:40+00:00| published-proof-of-concept| https://t.me/cveNotify/342...

9CVSS7AI score0.05834EPSS
Exploits1References1
Rows per page
Query Builder