22 matches found
CVE-2026-9507
creationtimestamp| type| source ---|---|--- 2026-06-16 14:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mog2hi73xp2v...
CVE-2025-9507
creationtimestamp| type| source ---|---|--- 2025-08-27 06:34:37+00:00| seen| https://gist.github.com/Darkcrai86/98c1b8122efe47156d12f9296fffa7dc...
CVE-2025-9507
A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitorinfo.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...
MAL-2025-9507 Malicious code in @teamteanpm2024/dolores-suscipit-dicta (npm)
The package @teamteanpm2024/dolores-suscipit-dicta was found to contain malicious code...
CVE-2024-9507
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.15.2 due to improper input validation within the iconUpload function. This...
CVE-2015-9507
The Easy Digital Downloads EDD Attach Accounts to Orders extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2024-9507
creationtimestamp| type| source ---|---|--- 2024-10-11 16:10:39+00:00| seen| https://t.me/cvedetector/7664...
CVE-2024-9507
CVE-2024-9507 concerns the WordPress plugin Bit Form (Contact Form by Bit Form) up to version 2.15.2. The issue arises from improper input validation in the iconUpload function, enabling authenticated attackers with Administrator-level access and above to perform a PHP filter chain attack and rea...
CVE-2024-9507 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.15.2 due to improper input validation within the iconUpload function. This...
WordPress Bit Form – Contact Form Plugin Plugin <= 2.15.2 is vulnerable to Arbitrary File Download
Software Bit Form – Contact Form Plugin Type Plugin Vulnerable versions = 2.15.2 Fixed in 2.15.3 OWASP Top 10 A3: Injection Classification Arbitrary File Download CVE CVE-2024-9507 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 2674338e71f9 Credits TANG Cheuk Hei siunam...
Oracle Linux 7 : microcode_ctl (ELSA-2022-9507)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9507 advisory. 2:2.1-73.13.0.5 - ensure UEK also rebuilds initramfs Orabug: 34280052 2:2.1-73.13.0.3 - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 -...
CVE-2019-9507
creationtimestamp| type| source ---|---|--- 2020-03-31 03:17:21+00:00| seen| https://t.me/cibsecurity/10857 2026-07-19 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqytvqu2nw23...
CVE-2019-9507
The CVE-2019-9507 issue affects Vertiv Avocent UMG-4000 web interface (version 4.2.1.19). The vulnerability is an OS command injection in the web UI, where commands are executed with root privileges after input is not properly sanitized, enabling an authenticated administrator to run arbitrary co...
CVE-2019-9507 The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands within the web application are executed as root, this could allow a remote attacker authenticated...
Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities
Overview The Vertiv Avocent Universal Management Gateway Model UMG-4000 is a data center management appliance. The web interface of the UMG-4000 is vulnerable to command injection, stored cross-site scripting XSS, and reflected XSS, which may allow an authenticated attacker with administrative...
CVE-2015-9507
creationtimestamp| type| source ---|---|--- 2019-10-23 20:27:48+00:00| seen| https://t.me/cibsecurity/7603 2024-01-17 16:07:31+00:00| seen| https://t.me/ctinow/169320...
CVE-2015-9507
CVE-2015-9507 concerns the Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress. The vulnerability is an XSS flaw caused by the misused add_query_arg function in affected builds across multiple EDD versions (1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2....
CVE-2018-9507
CVE-2018-9507 affects Android devices and relates to the Bluetooth stack. A vulnerability in bta_av_proc_meta_cmd (bta_av_act.cc) allows an out-of-bounds read due to an incorrect bounds check, enabling remote information disclosure over Bluetooth without extra privileges and without user interact...