CVE-2024-52769

DedeBIZ version v6.3.0 is affected by an arbitrary file upload vulnerability in the /admin/friendlink_edit component (API endpoint). This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. As a temporary workaround, it is recommended to disable the /admin/fri...

CVE-2024-52769

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-52769

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-52725

SemCms v4.8 is susceptible to a SQL injection vulnerability within the SEMCMS_SeoAndTag.php component. An attacker can exploit the ldgid parameter to execute arbitrary code. As a temporary workaround, it is recommended to restrict access to the affected component and avoid using the ldgid paramet...

CVE-2024-52770

An arbitrary file upload vulnerability in the component /admin/filemanagecontrol of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-48990

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable...

CVE-2024-48991

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter instead of the system's real Python interpreter. The initial security fix 6ce6136...

CVE-2024-48991

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter instead of the system's real Python interpreter. The initial security fix 6ce6136...

CVE-2024-48991

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter instead of the system's real Python interpreter. The initial security fix 6ce6136...

CVE-2024-48990

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable...

CVE-2024-33231

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component...

CVE-2024-51053

An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-22067

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands...

AcTranslators.exe AutoCAD RCE

The vulnerability of the AcTranslators.exe executable file used in AutoCAD modeling, design, and drawing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to write confidential data or execute arbitrary code withi...

Malicious code in alex_evil-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 055ea9627aa88ed77488e1c0cdc293a76dfe9e3d24d6fbfc3c897233e426303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odyssey-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ce9d73f12a7c3aaf67cec3e8f097a12ee60fd024262c709adc6a096289c9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50986

Clementine v.1.3.1 is vulnerable to a DLL hijacking issue caused by an untrusted search path in the QUSEREX.DLL component. A local attacker can execute arbitrary code by placing a crafted malicious DLL in the directory C:\Users\\AppData\Local\Microsoft\WindowsApps\. When the application launches,...

CVE-2024-51141

The TOTOLINK Bluetooth Wireless Adapter A600UB is vulnerable to arbitrary code execution due to an issue in the WifiAutoInstallDriver.exe and MSASN1.dll components. The root cause is identified as incorrect integrity value checking within the MSASN1.dll library of the wireless USB adapter's firmw...

Adobe Substance 3D Painter Untrusted Search Path Vulnerability

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Painter, which can be exploited by attackers to execute arbitrary code...

Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-48221)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Painter version 10.1.0 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...