CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2025-12509

On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-12509

creationtimestamp| type| source ---|---|--- 2025-10-31 17:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4izuslryx2q...

CVE-2025-12509

CVE-2025-12509 affects Bizerba BRAIN2. A Global_Shipping script can be introduced by an admin on a client and then executed on the BRAIN2 server with administrator rights, potentially giving full administrative control of the server. Root cause: execution of a privileged script across components ...

CVE-2024-12509

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpkbm6423 2024-12-20 07:50:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113684057150820738 2024-12-20 09:13:09+00:00| seen|...

CVE-2024-12509 Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedtwine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-12509 Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedtwine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2020-12509

CVE-2020-12509 affects s::can moni::tools prior to version 4.2. A path traversal vulnerability in the camera-file module allows an unauthenticated attacker to obtain arbitrary files from the device. Connected sources (Red Hat security advisory, CNNVD, PT Security) corroborate the issue and specif...

CVE-2020-12509 s::can moni::tools prone to path traversal in camera-file module

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2017-12509

CVE-2017-12509 is a Remote Code Execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is addressed in PLAT v7.3 (E0506) or later. Connected sources confirm the vulnerability allows code execution on affected iMC PLAT deploy...

youtubemp3.to XSS vulnerability

Vulnerable URL: http://youtubemp3.to/?v=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12509 VIP website status:| Yes Coordinated Disclosure Timeline: Description|...

WS-FTP Server 5.03 MKD Overflow

No description provided by source. $Id: wsftpserver503mkd.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

WS-FTP Server 5.03 MKD Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WS-FTP Serve...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 12509)

Multiple security vulnerabilities have been fixed in PostgreSQL : - allows remote authenticated users to cause a denial of service. CVE-2009-3229 - allows remote authenticated users to gain higher privileges. CVE-2009-3230 - when using LDAP authentication with anonymous binds, allows remote...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...