CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

EUVD-2026-58154

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58425

The Gitea application is vulnerable to an information disclosure flaw where OAuth token introspection returns metadata for tokens issued to other clients, violating RFC 7662 section 4 . This issue was addressed in Gitea v1.27.0 . Exploitation details are not provided in the documentation, but the...

CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58425: Exposure of Sensitive Information to an Unauthorized Actor

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

SUSE CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-7662

creationtimestamp| type| source ---|---|--- 2026-06-11 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnz7dllzzs22...

MINI-2PJ4-7662-QMHQ

Bulletin has no description...

CVE-2020-7662

creationtimestamp| type| source ---|---|--- 2026-04-07 15:02:10+00:00| seen| https://t.me/codebysec/9952 2026-09-01 20:01:57+00:00| seen| https://t.me/hackingAttack/41067 2026-09-01 20:01:57+00:00| seen| https://t.me/hackingAttack/41068 2026-09-02 01:02:18+00:00| seen|...

GHSA-7662-MF46-WR88

creationtimestamp| type| source ---|---|--- 2026-01-07 23:10:30+00:00| published-proof-of-concept| Telegram/0oJDwAhtc18DERwb9VjD5vzlW29jjr74xBieCo4YDk1jmcA...

CVE-2025-7662

The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-7662

CVE-2025-7662 affects the WordPress plugin Gestion de tarifs (versions ≤ 1.4). The vulnerability is an SQL Injection via the tarif and intitule shortcodes caused by insufficient escaping and lack of prepared statements. Authenticated users with Contributor+ access can append additional SQL to exi...

WordPress Gestion de tarifs plugin <= 1.4 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by johska in WordPress Plugin Gestion de tarifs versions = 1.4...

MAL-2025-7662 Malicious code in @crabas0npm2/harum-aperiam-repellendus (npm)

The package @crabas0npm2/harum-aperiam-repellendus was found to contain malicious code...

CVE-2024-7662

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function savepackage of the file admin/packages/managpackage.php. The manipulation leads to cross-site request forgery. The attack can be...

CVE-2024-7662 SourceCodester Car Driving School Management System manag_package.php save_package cross-site request forgery

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function savepackage of the file admin/packages/managpackage.php. The manipulation leads to cross-site request forgery. The attack can be...

CVE-2020-7662

websocket-extensions npm module prior to 0.1.4 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

WebAssembly Binaryen Denial Of Service (CVE-2019-7662)

A denial of service vulnerability exists in WebAssembly Binaryen. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...