MINI-PHPH-9FMM-7489

Bulletin has no description...

CVE-2018-7489

creationtimestamp| type| source ---|---|--- 2026-01-14 23:13:30+00:00| seen| https://gist.github.com/ilya-startcode/36aae702894882b7b005b436448a38a0...

MAL-2025-7489 Malicious code in @crabas0npm/quis-aliquid-doloremque (npm)

The package @crabas0npm/quis-aliquid-doloremque was found to contain malicious code...

CVE-2025-7489

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7489

creationtimestamp| type| source ---|---|--- 2025-07-12 21:22:01+00:00| seen| https://bsky.app/profile/potato.software/post/3ltsc4awr562j...

CVE-2025-7489 PHPGurukul Vehicle Parking Management System search-vehicle.php sql injection

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. Th...

CVE-2025-7489

CVE-2025-7489 affects PHPGurukul Vehicle Parking Management System v1.13. A vulnerability in the /admin/search-vehicle.php processing enables manipulation of the searchdata parameter, causing a SQL injection. The attack can be initiated remotely, and public disclosure of the exploit is noted. Mul...

CVE-2025-7489 PHPGurukul Vehicle Parking Management System search-vehicle.php sql injection

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. Th...

Oracle Linux 10 : php (ELSA-2025-7489)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7489 advisory. 8.3.19-1 - rebase to 8.3.19 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

CVE-2020-7489

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

Linux Distros Unpatched Vulnerability : CVE-2013-7489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution. CVE-2013-7489 Note...

WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.6 is vulnerable to Cross Site Scripting (XSS)

Software Forms for Mailchimp by Optin Cat Type Plugin Vulnerable versions = 2.5.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7489 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2fb4093a4680 Credits mike harr...

CVE-2024-7489

creationtimestamp| type| source ---|---|--- 2024-10-12 08:37:37+00:00| seen| https://t.me/cvedetector/7763...

CVE-2024-7489 Forms for Mailchimp by Optin Cat <= 2.5.7 - Authenticated (Editor+) Stored Cross-Site Scripting via Form Color Parameters

The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form color parameters in all versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping. This makes it possible for...

RHEL 9 : kernel (RHSA-2024:7489)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7489 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: bridge: confirm...

CGA-C54Q-7489-FM3V

Bulletin has no description...

FreeBSD : py-beaker -- arbitrary code execution vulnerability (b54abe9d-7024-4d10-98b2-180cf1717766)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b54abe9d-7024-4d10-98b2-180cf1717766 advisory. - The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which...

Security Bulletin: IBM B2B Advanced Communications is vulnerable to multiple issues due to FasterXML jackson-databind

Summary IBM B2B Advanced Communications has addressed vulnerabilities in jackson-databind shipped with product. Vulnerability Details CVEID:CVE-2018-14719 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by the failure to block...

SUSE CVE-2013-7489

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution...

SUSE CVE-2018-7489

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of th...