undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow is a Java web server based on non-blocking IO. It consists of a few different parts: A core HTTP server that supports both blocking and non-blocking IO A Servlet 3.1 implementation A JSR-356 compliant web socket implementation Website: http://undertow.io Issues:...

CVE-2026-7816

A flaw was found in pgadmin4. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve arbitrary command execution on the pgAdmin server, or "...

CVE-2026-7816

creationtimestamp| type| source ---|---|--- 2026-05-11 16:35:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllpeiqf6e2t 2026-05-26 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrotseyvx2u...

CVE-2026-7816

OS command injection CWE-78 vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve...

CVE-2019-7816

ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2025-7816

creationtimestamp| type| source ---|---|--- 2025-07-19 15:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludblco4lg2o 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7816

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2025-7816 PHPGurukul Apartment Visitors Management System HTTP POST Request visitor-detail.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2025-7816

CVE-2025-7816 affects PHPGurukul Apartment Visitors Management System 1.0. The reported issue is a cross-site scripting vulnerability in the HTTP POST Request Handler, specifically the /visitor-detail.php file where the visname parameter can be manipulated to inject arbitrary scripts. The vulnera...

CVE-2025-7816 PHPGurukul Apartment Visitors Management System HTTP POST Request visitor-detail.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. Affected is an unknown function of the file /visitor-detail.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scriptin...

CVE-2024-7816

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7816 Gixaw Chat <= 1.0 - Stored XSS via CSRF

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Gixaw Chat Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Gixaw Chat Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7816 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID aa72a581011b Credits Daniel Ruf Required privilege...

MSC-2024-7816

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

Bkav Home information leakage vulnerability

Bkav Home is an electronic security software from Bkav Inc. An information disclosure vulnerability exists in Bkav Home v7816 build 2403161130, which originates from a vulnerability that allows an attacker to cause an information disclosure by triggering the 0x222240 IOCTL code in the BkavSDFlt.s...

WordPress Royal Elementor Addons RCE

Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin use exploit/multi/http/wp/royalelementoraddonsrce msf undefinedroyalelementoraddonsrce show actions ...actions... msf undefinedroyalelementoraddonsrce set ACTION msf...

co.paralleluniverse:comsat-actors-undertow (0.1.1), com.github.wuic:wuic-test (>=0.5.0.rc1, <=0.5.2) +91 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.0.0.final, <=1.0.16.final)

io.undertow:undertow-core MAVEN version =1.0.0.final, =0.5.0.rc1, =1.0, =0.4.1, =0.4.1, =0.4.4 - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 - com.mpay24.payment:mpay24-soap-client 1.0.0.0 - de.chkal.backset:backset-core 1.0.0.alpha1 -...

co.paralleluniverse:comsat-actors-undertow (0.1.1), com.github.wuic:wuic-test (>=0.5.0.rc1, <=0.5.2) +91 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.0.0.final, <=1.0.16.final)

io.undertow:undertow-core MAVEN version =1.0.0.final, =0.5.0.rc1, =1.0, =0.4.1, =0.4.1, =0.4.4 - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 - com.mpay24.payment:mpay24-soap-client 1.0.0.0 - de.chkal.backset:backset-core 1.0.0.alpha1 -...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-http2-test-suite (>=1.1.0.beta7, <=1.1.0.beta8) +4 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.1.0.beta1, <=1.1.0.cr4)

io.undertow:undertow-core MAVEN version =1.1.0.beta1, =1.1.0.beta7, =1.1.0.beta1, =1.1.0.beta1, =1.0.0.alpha1, =1.0.0.alpha8 Source cves: CVE-2014-7816 Source advisory: OSV:GHSA-H6P6-FC4W-CQHX...

io.undertow:undertow-http2-test-suite (>=1.2.0.beta1, <=1.2.0.beta2), io.undertow:undertow-servlet (>=1.2.0.beta1, <=1.2.0.beta2) +2 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.2.0.beta1, <=1.2.0.beta2)

io.undertow:undertow-core MAVEN version =1.2.0.beta1, =1.2.0.beta1, =1.2.0.beta1, =1.2.0.beta1, =1.0.0.alpha9, =1.0.0.alpha10 Source cves: CVE-2014-7816 Source advisory: GHSA-H6P6-FC4W-CQHX...