13 matches found
OpenClaw Denial of Service Vulnerability (CNVD-2026-13552)
OpenClaw is software for processing base64 encoded media input. A denial of service vulnerability exists in OpenClaw. An attacker can exploit this vulnerability to cause a denial of service by constructing an oversized base64 load that triggers a memory exhaustion...
CVE-2025-13552
creationtimestamp| type| source ---|---|--- 2025-11-23 15:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6cmmuofv52x 2025-11-24 04:31:53+00:00| seen| https://infosec.exchange/users/offseq/statuses/115602798136195641 2025-11-24 04:31:55+00:00| seen|...
CVE-2025-13552 D-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflow
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploi...
CVE-2024-13552
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.0 via file upload due to missing validation on a user controlled key. This makes it possible for authenticated attackers to...
CVE-2024-13552
creationtimestamp| type| source ---|---|--- 2025-03-07 12:25:45+00:00| seen| https://t.me/cvedetector/19805 2025-03-07 14:38:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6833 2025-03-08 04:34:56+00:00| seen| Telegram/0Cuv1QWlA-rLV6AiKmRGQwI5GWH-njWf7Atbn8q3bj-9DDbo...
CVE-2024-13552
CVE-2024-13552 affects the WordPress plugin SupportCandy – Helpdesk & Customer Support Ticket System (
CVE-2020-13552
creationtimestamp| type| source ---|---|--- 2021-02-17 22:49:20+00:00| seen| https://t.me/cibsecurity/23773 2021-02-21 12:53:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2750...
CVE-2020-13552
CVE-2020-13552 affects Advantech WebAccess/SCADA 9.0.1. TALOS details multiple local privilege escalation vectors: attackers can replace binaries or loaded modules in the installation folder or manipulate service executables to run code with NT SYSTEM privileges. The issue involves weak permissio...
Advantech WebAccess SCADA Policy Bypass (CVE-2019-13552)
A policy bypass vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow the disclosure of sensitive information...
CVE-2019-13552
Advantech WebAccess (version 8.4.1 and earlier) contains multiple command-injection vulnerabilities due to improper validation of user-supplied data, impacting the WebAccess Node and related components. The CVE-2019-13552 entry specifically covers command injection that can lead to arbitrary file...
Advantech WebAccess
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Advantech Equipment : WebAccess Vulnerabilities : Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization 2. RISK EVALUATION Successful exploitation of these...
CVE-2018-13552
The CVE-2018-13552 entry corresponds to Trabet_Coin_PreICO, where the mintToken function of the Ethereum token’s smart contract contains an integer overflow. This overflow allows the contract owner to set any user’s balance to an arbitrary value. Connected CNVD entry (Trabet_Coin_PreICO Integer O...
Fedora Update for slim FEDORA-2009-13552
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...