5058 matches found
CVE-2025-14196
A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public...
CVE-2025-14196 H3C Magic B1 aspForm sub_44de0 buffer overflow
A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public...
H3C Magic B1 安全漏洞
H3C Magic B1 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B1 100R004 and prior versions, which stems from incorrect manipulation of the parameter param in the file /goform/aspForm, which could result in a buffer overflow...
CVE-2016-20023
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided...
EUVD-2016-10801
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided...
CVE-2025-14015 H3C Magic B0 aspForm EditWlanMacList buffer overflow
A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...
PT-2025-49113
Name of the Vulnerable Software and Affected Versions H3C Magic B0 versions up to 100R002 Description A weakness exists in H3C Magic B0 up to version 100R002. The issue involves the EditWlanMacList function within the /goform/aspForm file. Manipulation of the param argument can lead to a buffer...
CVE-2025-10460
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
PT-2025-46694
Name of the Vulnerable Software and Affected Versions WellSky Harmony version 4.1.0.2.83 Description A SQL injection issue exists in the login functionality of WellSky Harmony. The 'xmHarmony.asp' endpoint is affected, specifically due to insufficient sanitization of user-supplied input provided...
CVE-2025-56385
WellSky Harmony version 4.1.0.2.83 is vulnerable to a SQL injection in its login functionality at the 'xmHarmony.asp' endpoint. The root cause is the improper sanitization of user-supplied input provided through the 'TXTUSERID' parameter before it is incorporated into a SQL query. Successful expl...
EUVD-2025-101965
Malicious code in swiftaspz3n npm...
EUVD-2025-104062
Malicious code in luckyaspz3n npm...
EUVD-2025-90454
Malicious code in limitedaspz3n npm...
EUVD-2025-74302
Malicious code in relevantaspcopper-76 npm...
Malicious code in consistent_asp-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110592 Malicious code in vitreous_asp_replicate_automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1248371612737a6030dd8598d54ecd517280a4436bfeac567be34b5380eb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75263
Malicious code in vitreousaspreplicateautomation npm...
EUVD-2025-79558
Malicious code in conservationaspz3n npm...