CVE-2026-16739 Epeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation Forgery

The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.4 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...

CVE-2018-16739

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges...

CVE-2018-16739

creationtimestamp| type| source ---|---|--- 2023-10-27 02:16:11+00:00| seen| https://t.me/cibsecurity/73024...

CVE-2018-16739

The CVE-2018-16739 vulnerability affects ABUS TVIP devices due to a path traversal in the /opt/cgi/admin/filewrite endpoint. The issue allows an attacker to write arbitrary files and execute code with root privileges, as indicated by the described impact (root, high confidentiality/availability/i...

CVE-2020-16739

...

CVE-2020-16739

CVE-2020-16739 entry is rejected and not used per the initial description.

CVE-2017-16739

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution...

CVE-2017-16739

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution...

CVE-2017-16739

The CVE-2017-16739 issue affects Wecon LeviStudio HMI Editor (LEVI Studio HMI Editor) v1.8.29 and earlier. Several connected advisories describe stack-based buffer overflow vulnerabilities in LeviStudioU/LEVI Studio Editor project handling (e.g., overly long XML attributes like MulStatus szFilena...

WECON Technology Co., Ltd. LeviStudio HMI Editor

CVSS v3 5.3 ATTENTION: Locally exploitable/low skill level to exploit. Vendor: WECON Technology Co., Ltd. WECON Equipment: LeviStudio HMI Editor Vulnerabilities: Buffer Overflows AFFECTED PRODUCTS The following versions of LEVI Studio HMI Editor, an HMI programming software product, are affected:...