CVE-2025-7400

creationtimestamp| type| source ---|---|--- 2025-10-07 08:09:53+00:00| seen| Telegram/ajBaXDOMQa2Tu8LawjpqmpmgVaUcLXteyRoVHIvLTHZwlE...

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Featured Image from URL versions = 5.2.7...

CVE-2024-7400 Local privilege escalation in ESET products for Windows

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so...

CVE-2024-7400

creationtimestamp| type| source ---|---|--- 2024-09-24 16:00:07+00:00| seen| https://t.me/truesecator/6241 2024-09-25 13:30:40+00:00| seen| https://t.me/ptswarm/222 2024-09-27 09:53:38+00:00| seen| https://t.me/cvedetector/6482 2024-12-25 05:47:22+00:00| seen| https://t.me/SecLabNews/16058...

Malware in wlwz-2312-7400

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-836 Malicious code in wlwz-2312-7400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6414ec8a38a6e4864ad94a5c541e088cff447d724e7503243c4e922bde644048 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6414ec8a38a6e4864ad94a5c541e088cff447d724e7503243c4e922bde644048 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : libcap (RHSA-2023:7400)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7400 advisory. Libcap is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15 capabilities. Security Fixes: libcap: Integer Overflow in...

MSC-2022-7400

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

Rukovoditel ERP & CRM 2.4.1 - path Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Vendor: Rukovoditel Software Link: https://sourceforge.net/projects/rukovoditel/ Affected Version: 2.4.1 and...

Rukovoditel ERP And CRM 2.4.1 Cross Site Scripting

Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2019-03-24 Google Dork: N/A Vendor: Rukovoditel Software Link: https://sourceforge.net/projects/rukovoditel/ Affected Version: 2.4.1 and possibly before...

Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting

Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2019-03-24 Google Dork: N/A Vendor: Rukovoditel Software Link: https://sourceforge.net/projects/rukovoditel/ Affected Version: 2.4.1 and possibly before...

CVE-2019-7400

Rukovoditel before 2.4.1 allows XSS...

CVE-2019-7400

The CVE-2019-7400 entry concerns Rukovoditel ERP/CRM prior to version 2.4.1, affected by a reflected Cross‑Site Scripting (XSS) vulnerability. The issue arises from unsanitized input in the path parameter (e.g., in index.php?module=items/items&path=...), allowing injected script to be executed in...

XCP Router Service Cisco Privilege Escalation

The vulnerability of the XCP Router service in Cisco Unified Communications Manager IM and Presence Service, as well as the Cisco TelePresence Video Communication Server, stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failure...

Input validation

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

PT-2018-1536

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions affected versions not specified Cisco TelePresence Video Communication Server versions affected versions not specified Description The issue is caused by insufficient input...