CVE-2026-7747

A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password results in buffer overflow. The attack can be...

CVE-2026-7747

A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password results in buffer overflow. The attack can be...

CVE-2026-7747

creationtimestamp| type| source ---|---|--- 2026-05-04 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkzcotcpov2m 2026-05-04 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116515486312761169 2026-05-04 09:25:23+00:00| seen|...

Azure Linux 3.0 Security Update: audiofile (CVE-2015-7747)

The version of audiofile installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-7747 advisory. - Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows...

MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2017-7747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was address...

Linux Distros Unpatched Vulnerability : CVE-2015-7747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of...

CVE-2015-7747 affecting package audiofile for versions less than 0.3.6-27

CVE-2015-7747 affecting package audiofile for versions less than 0.3.6-27. A patched version of the package is available...

RHEL 7 : audiofile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - audiofile: Buffer overflow when changing number of channels and sample format CVE-2015-7747 - audiofile:...

Oracle Linux 9 : libxml2 (ELSA-2023-7747)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7747 advisory. 2.9.13-5 - Fix CVE-2023-39615 RHEL-5180 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

SUSE: Security Advisory (SUSE-SU-2017:0940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7747

This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller...

CVE-2020-7747

CVE-2020-7747 – Cross-site Scripting in lightning-server (session controller) . Several connected sources confirm that lightning-server is vulnerable to XSS across all versions, allowing injection of malicious JavaScript via the session controller. A PoC demonstrates posting a crafted payload in ...

CVE-2020-7747 Cross-site Scripting (XSS)

This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller...

CVE-2015-7747

CVE-2015-7747 affects the Audio File Library (audiofile/libaudiofile). The vulnerability is a buffer overflow in afReadFrames that can be triggered by a crafted audio file, potentially causing a denial of service or arbitrary code execution. The issue is corroborated across multiple feeds (includ...

CVE-2015-7747

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

CVE-2019-7747

CVE-2019-7747 affects DbNinja 3.2.7 and enables session fixation through the data.php sessid parameter. The issue’s root cause is the use of a data.php sessid token that can allow an attacker to establish or hijack a user session. Public references indicate the vulnerability exists, with NVD noti...

CVE-2018-7747

Summary (CVE-2018-7747): WordPress Caldera Forms plugin vulnerable through stored XSS in versions up to 1.5.9.1, fixed in 1.6.0-rc.1. Vulnerability arises from insufficient input validation allowing remote attackers to inject arbitrary script via (1) a greeting message, (2) the email transaction ...

WordPress Caldera Forms 1.5.9.1 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CalderaForms 1.5.9.1 - multiple XSS Exploit Author: Federico Scalco fscalco at mentat dot is @mindpr00f Vendor Homepage: https://calderaforms.com/ Software Link: https://wordpress.org/plugins/caldera-forms/ Vulnerable App:...