CVE-2026-7780

creationtimestamp| type| source ---|---|--- 2026-05-04 23:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2sjl3hup2h...

EUVD-2019-7780

Malware in sbrugna...

Ubuntu: Security Advisory (USN-7780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-7780

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

CVE-2025-7780

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

CVE-2025-7780

creationtimestamp| type| source ---|---|--- 2025-07-24 09:38:25+00:00| seen| Telegram/n2X3BjsuuTA1kKBHKflXMps4Ewm2yQcfNlMJXB5UJM21GTM...

CVE-2025-7780 AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

WordPress Ai Engine plugin <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions vulnerability

Missing URL Scheme Validation to Authenticated Subscriber+ Arbitrary File Read via simpleTranscribeAudio and getaudio Functions vulnerability discovered by ISMAILSHADOW in WordPress Plugin AI Engine versions = 2.9.4...

CVE-2024-7780

creationtimestamp| type| source ---|---|--- 2024-08-20 07:05:34+00:00| seen| https://t.me/cvedetector/3595...

com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0_akka25circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0akka25circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: OSV:GHSA-Q42Q-523G-3FWV...

com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0_akka25circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0akka25circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: GHSA-Q42Q-523G-3FWV...

com.softwaremill.akka-http-session:jwt_2.13 (>=0.5.7, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.13 (>=0.5.7, <=0.5.10)

com.softwaremill.akka-http-session:core2.13 MAVEN version =0.5.7, =0.5.7, =0.5.10 Source cves: CVE-2020-7780 Source advisory: OSV:GHSA-Q42Q-523G-3FWV...

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0_akka24circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0akka24circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: OSV:GHSA-Q42Q-523G-3FWV...

Mozilla Firefox Security Advisory (MFSA2017-18) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-7780

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:08+00:00| seen| https://t.me/cibsecurity/16890 2020-12-09 07:31:54+00:00| seen| https://t.me/cibsecurity/17435...

CVE-2020-7780

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

CVE-2020-7780

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

CVE-2020-7780 Cross-site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0_akka24circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0, <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0, <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0akka24circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: MEND:CVE-2020-7780...

CVE-2020-7780

CVE-2020-7780 affects the akka-http-session core artifacts: core_2.13, core_2.12, and core_2.11 up to version 0.5.11. The underlying issue is a CSRF protection bypass where endpoints protected by randomTokenCsrfProtection can be reached with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN co...