32789 matches found
CVE-2025-54693
Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects Form Block: from n/a through = 1.5.5...
CVE-2012-10060
Sysax Multi Server versions prior to 5.55 contains a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...
CVE-2012-10056
PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Because this directory is publicly accessib...
CVE-2025-9020 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free
A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...
CVE-2025-9020
Summary: CVE-2025-9020 affects PX4 PX4-Autopilot up to 1.15.4. The issue resides in MavlinkReceiver::handle_message_serial_control within mavlink_receiver.cpp of the Mavlink Shell Closing Handler. The argument _mavlink_shell is manipulated, causing a use-after-free condition. Local access is requ...
CVE-2025-9020 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free
A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...
CVE-2025-9020 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free
A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...
Linux Distros Unpatched Vulnerability : CVE-2022-39402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Core Client. Supported versions that are affected are 8.0.30 and prior. Easily...
Malicious code in shell-uglify-refactor-compile-cold (npm)
The package shell-uglify-refactor-compile-cold was found to contain malicious code...
Malicious code in async-deserialize-xi-assert-shell (npm)
The package async-deserialize-xi-assert-shell was found to contain malicious code...
Malicious code in cloud-shell-extension (npm)
The package cloud-shell-extension was found to contain malicious code...
Malicious code in bad-spy-shell-report-assert (npm)
The package bad-spy-shell-report-assert was found to contain malicious code...
MAL-2025-23220 Malicious code in info-sanitize-shell-omicron-thread (npm)
The package info-sanitize-shell-omicron-thread was found to contain malicious code...
MAL-2025-33081 Malicious code in shell-easy-finally-water-epsilon (npm)
The package shell-easy-finally-water-epsilon was found to contain malicious code...
Malicious code in shell-uglify-uglify-fast-grid (npm)
The package shell-uglify-uglify-fast-grid was found to contain malicious code...
Malicious code in shell-easy-finally-water-epsilon (npm)
The package shell-easy-finally-water-epsilon was found to contain malicious code...
Malicious code in sed-deploy-shell-cat-grid (npm)
The package sed-deploy-shell-cat-grid was found to contain malicious code...
MAL-2025-15595 Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)
The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...