undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow هو خادم ويب Java يعتمد على الإدخال/الإخراج غير المحظور. يتكون من عدة أجزاء مختلفة: خادم HTTP أساسي يدعم كلاً من الإدخال/الإخراج المحظور وغير المحظور تنفيذ لمواصفة Servlet 3.1 تنفيذ WebSocket متوافق مع JSR-356 الموقع الإلكتروني: http://undertow.io المشكلات:...

CVE-2026-7816

A flaw was found in pgadmin4. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve arbitrary command execution on the pgAdmin server, or "...

CVE-2026-7816

creationtimestamp| type| source ---|---|--- 2026-05-11 16:35:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllpeiqf6e2t 2026-05-26 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrotseyvx2u...

CVE-2026-7816

OS command injection CWE-78 vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve...

CVE-2019-7816

ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2025-7816

creationtimestamp| type| source ---|---|--- 2025-07-19 15:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludblco4lg2o 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7816

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2025-7816 PHPGurukul Apartment Visitors Management System HTTP POST Request visitor-detail.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2025-7816 PHPGurukul Apartment Visitors Management System HTTP POST Request visitor-detail.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2025-7816

CVE-2025-7816 affects PHPGurukul Apartment Visitors Management System 1.0. The reported issue is a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically the /visitor-detail.php file where the visname parameter can be manipulated to inject arbitrary scripts. The vulnera...

CVE-2024-7816

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7816 Gixaw Chat <= 1.0 - Stored XSS via CSRF

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Gixaw Chat Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Gixaw Chat Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7816 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID aa72a581011b Credits Daniel Ruf Required privilege...

Bkav Home 信息泄露漏洞

Bkav Home is an electronic security software from Bkav Inc. An information disclosure vulnerability exists in Bkav Home v7816 build 2403161130, which originates from a vulnerability that allows an attacker to cause an information disclosure by triggering the 0x222240 IOCTL code in the BkavSDFlt.s...

WordPress Royal Elementor Addons RCE

Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin use exploit/multi/http/wp/royalelementoraddonsrce msf undefinedroyalelementoraddonsrce show actions ...actions... msf undefinedroyalelementoraddonsrce set ACTION msf...

Mozilla Firefox Security Advisory (MFSA2017-21) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-7816

CVE-2020-7816 affects the JPEG image parsing module in DaView Indy, DaVa+, and DaOffice. The root cause is a stack overflow read, enabling an unauthenticated, remote attacker to cause arbitrary code execution on an affected device. Exploitation path described in the sources involves sending a cra...

CVE-2019-7816

ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7816

CVE-2019-7816 affects Adobe ColdFusion: Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier. The issue is a file upload restriction bypass that could allow arbitrary code execution on a vulnerable system. The vulnerability is described across multiple sources in the Connected do...

CVE-2018-7816

Technical details about CVE-2018-7816 are not provided in the connected documents. The available sources reiterate a permissions/privilege issue in the web GUI of the 1st Gen Pelco Sarix Enhanced Camera without specifics on affected versions or exploitability. Monitor for updates.