CVE-2026-8157

creationtimestamp| type| source ---|---|--- 2026-06-22 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116792585922539614 2026-06-22 07:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l 2026-06-22 08:14:26+00:00| seen|...

MAL-2025-8157 Malicious code in @kollusietea/est-sapiente-omnis (npm)

The package @kollusietea/est-sapiente-omnis was found to contain malicious code...

CVE-2025-8157

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of the file /admin/lastthirtyays-reg-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the...

CVE-2025-8157

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of the file /admin/lastthirtyays-reg-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the...

CVE-2025-8157 PHPGurukul User Registration & Login and User Management lastthirtyays-reg-users.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of the file /admin/lastthirtyays-reg-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the...

Linux Distros Unpatched Vulnerability : CVE-2014-8157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute...

CVE-2024-8157

The Alphabetical List WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress Alphabetical List Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Alphabetical List Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8157 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a8d90b9bc4d8 Credits Bob Matyas Required...

RHEL 9 : kernel (RHSA-2024:8157)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8157 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Local information disclosure o...

CVE-2019-8157

creationtimestamp| type| source ---|---|--- 2024-02-05 08:41:27+00:00| seen| https://t.me/ctinow/179040...

Debian: Security Advisory (DLA-138-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-8157

CVE-2016-8157 is rejected/not used per the initial description.

CVE-2020-8157

UniFi Cloud Key firmware = v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface UART...

CVE-2020-8157

UniFi Cloud Key firmware = v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface UART...

CVE-2020-8157

The CVE concerns UniFi Cloud Key firmware for gen2/gen2 Plus (versions ≤ 1.1.10) where an unrestricted root access via the serial UART interface is possible. Affected component: Cloud Key firmware; root access through UART is the stated impact. Remediation: upgrade to firmware 1.1.11 (per the lin...

CVE-2019-8157

Magento 2.2.x before 2.2.10 and 2.3.x before 2.3.3 or 2.3.2-p1 are affected by a stored XSS vulnerability. An authenticated user can manipulate a downloadable link, triggering error handling that accesses unsanitized user input. This leads to stored cross-site scripting and potential data exposur...

CVE-2018-8157

Summary: CVE-2018-8157 is a remote code execution vulnerability in Microsoft Office caused by the program's failure to properly handle objects in memory, enabling arbitrary code execution when a user opens a specially crafted file (as described in CNVD mappings). Affected product families include...

Microsoft Office 2013 Service Pack 1 Multiple RCE Vulnerabilities (KB3172436)

This host is missing an important security update according to Microsoft KB3172436 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Description of the security update for Office 2013: May 8, 2018

Description of the security update for Office 2013: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Microsoft...