CVE-2025-54544

QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. By default admin user is not able to add...

PT-2025-34986

Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 Description: QuickCMS is susceptible to a Stored Cross-Site Scripting XSS issue through the aDirFilesDescriptions parameter within the files editor functionality. An attacker with administrative privileges can inject...

Agent Zero 路径遍历漏洞

Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A path traversal vulnerability exists in Agent Zero version 0.8.1.2, which stems from improper manipulation of the parameter path in the file /getworkdirfiles, which could lead to a path traversal attack...

Security update for mysql-community-server (important)

This update for mysql-community-server to version 5.6.36 fixes the following issues: These security issues were fixed: - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

Adobe Shockwave Player Multiple Vulnerabilities-01 July13 (Mac OS X)

This host is installed with Adobe Shockwave player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvuln01jul13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities-01 July13 Mac OS X Authors: Thanga Praka...

CVE-2010-2882

DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3812 of a...

Memory corruption

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a...

CVE-2010-2869

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3712 of a...

Memory corruption

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...