EKC Tournament Manager WordPress plugin - Path Traversal

EKC Tournament Manager WordPress plugin 2.2.2 contains a path traversal caused by insufficient validation, letting logged in admin users download system files outside the WordPress directory. id: CVE-2024-9765 info: name: EKC Tournament Manager WordPress plugin - Path Traversal author: Sourabh-Sa...

CVE-2025-9765

creationtimestamp| type| source ---|---|--- 2025-09-01 08:57:55+00:00| seen| https://gist.github.com/Darkcrai86/706e1cfa301ce02a6fbb4acc8f6cfd27...

MAL-2025-9765 Malicious code in @zalastax/nolb-_antt (npm)

The package @zalastax/nolb-antt was found to contain malicious code...

RHSA-2025:9765

creationtimestamp| type| source ---|---|--- 2025-07-09 08:16:35+00:00| seen| Telegram/MjYluiJpjErDNJoUWGpw88wknA1qFf4cYUTvnH0CD8ErGs...

WordPress EKC Tournament Manager plugin < 2.2.2 - Admin+ Arbitrary File Download vulnerability

Admin+ Arbitrary File Download vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin EKC Tournament Manager versions 2.2.2...

CVE-2024-9765

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory...

CVE-2024-9765

creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16748...

CVE-2024-9765 EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory...

Linux Distros Unpatched Vulnerability : CVE-2014-9765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input...

Genivia gSOAP Buffer Overflow (CVE-2017-9765)

A buffer overflow vulnerability exists in Genivia Gsoap. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Huawei EulerOS: Security Advisory for xdelta (EulerOS-SA-2019-2552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-9765

In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...

Fedora 26 : gsoap (2017-d2174c28ed) (Devil's Ivy)

Security fix for CVE-2017-9765. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 25 : gsoap (2017-ff06ff0ec9) (Devil's Ivy)

Security fix for CVE-2017-9765. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

openSUSE Security Update : gsoap (openSUSE-2017-842) (Devil's Ivy)

This update for gsoap fixes the following security issue : - CVE-2017-9765: A remote attacker may have triggered a buffer overflow to cause a server crash denial of service after sending 2GB of a specially crafted XML message, or possibly have unspecified futher impact. bsc1049348 %NASLMINLEVEL...

Updated gsoap packages fix security vulnerability

A potential vulnerability to a large and specific XML message over 2GB in size greater than 2147483711 bytes to trigger the software bug. A buffer overflow can cause an open unsecured server to crash or malfunction after 2GB is received CVE-2017-9765...

Devil's Ivy vulnerability(CVE-2017-9765)

When we began a security analysis of remote configuration services last year, we had no idea it would lead us to uncover vulnerabilities that affect so many users. We have been studying the prevalence and nature of the vulnerabilities that arise in remote configuration services, so when we...

CVE-2017-9765

creationtimestamp| type| source ---|---|--- 2017-07-18 21:30:10+00:00| exploited| https://t.me/informationsecuritychannel/6916 2017-07-19 07:10:04+00:00| exploited| https://t.me/informationsecuritychannel/6926 2017-07-19 18:52:00+00:00| published-proof-of-concept| https://t.me/alexmakus/1274...

CVE-2016-9765

CVE-2016-9765 is rejected/not used; this CVE entry does not represent an active vulnerability per the description.

CVE-2016-9765

...