77 matches found
CVE-2026-8116
A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnerability affects unknown code of the file src/controllers/dxtController.ts. This manipulation of the argument manifest.name causes path traversal. The attack may be initiated remotely. The exploit has been mad...
CVE-2026-8116 huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal
A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnerability affects unknown code of the file src/controllers/dxtController.ts. This manipulation of the argument manifest.name causes path traversal. The attack may be initiated remotely. The exploit has been mad...
CVE-2025-8116
PAD CMS is vulnerable to Reflected XSS in printing and save to PDF functionality. Malicious attacker can craft special URL, which will result in arbitrary JavaScript execution in victim's browser, when opened. This issue affects all 3 templates: www, bip and www+bip. This product is End-Of-Life a...
CVE-2025-8116
creationtimestamp| type| source ---|---|--- 2025-09-30 11:00:39+00:00| seen| Telegram/Hax4WrSKUzZGPllQ6iXIUDhoI4-IoQ6WrevmgEqAKa8XsA...
MAL-2025-8116 Malicious code in @juigorg/similique-non (npm)
The package @juigorg/similique-non was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2014-8116
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ELF parser readelf.c in file before 5.21 allows remote attackers to cause a denial of service CPU consumption or crash via a large number of 1 program or 2...
CVE-2024-8116
An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names...
CVE-2024-8116
CVE-2024-8116 affects GitLab CE/EE, impacting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. The vulnerability allows an unauthorized user to retrieve branch names via a specific GraphQL query under certain conditions, constituting an information disclosure. The...
CVE-2024-8116
Removed by vendor...
CVE-2024-8116 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names...
CVE-2024-8116 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names...
CVE-2024-8116 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names...
GitLab 16.9 < 17.4.6 / 17.5 < 17.5.4 / 17.6 < 17.6.2 (CVE-2024-8116)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an...
CVE-2024-8116
creationtimestamp| type| source ---|---|--- 2024-12-11 16:30:39+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113635140492482846 2024-12-16 04:35:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113660640409849262 2024-12-16 07:18:27+00:00| seen|...
Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2024-8116)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8116 advisory. - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - 1001-orabug36904359-CVE-2024-21131-fix.patch -...
RHEL 7 : java-1.8.0-openjdk (RHSA-2024:8116)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8116 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
RHEL 5 : file (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - file: out-of-bounds read in elf note headers CVE-2014-3710 - file: denial of service issue resource...
CVE-2019-8116
creationtimestamp| type| source ---|---|--- 2024-02-04 13:16:20+00:00| seen| https://t.me/ctinow/178816...
Debian: Security Advisory (DLA-131-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K16347: Linux file utility vulnerabilities CVE-2014-8116 and CVE-2014-8117
Security Advisory Description CVE-2014-8116 The ELF parser readelf.c in file before 5.21 allows remote attackers to cause a denial of service CPU consumption or crash via a large number of 1 program or 2 section headers or 3 invalid capabilities. CVE-2014-8117 softmagic.c in file before 5.21 does...