28350 matches found
CVE-2012-10033 Narcissus backend.php Image Configuration Command Injection
Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configureimage function. This function invokes PHP’s passthru with the unsanitize...
CVE-2012-10033
Narcissus (backend.php) Image Configuration Command Injection is CVE-2012-10033. The flaw: release parameter is not sanitized before passing to configure_image(), which invokes PHP passthru() with the unsanitized input. This enables remote code execution via a crafted POST request under the web s...
CVE-2012-10029
Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in visApi.php. An authenticated user can inject system commands via unsanitized parameters such as host, resulting in remote code execution...
CVE-2012-10032 Maxthon3 about:history XCS Trusted Zone Code Execution
Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting XCS via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification o...
CVE-2012-10031 BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow
BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...
Kodi Xbmc 安全漏洞
Kodi Xbmc is a free and open source software media player and digital media entertainment center from the Kodi Foundation in the United States. A security vulnerability exists in Kodi Xbmc version 2012-11-04 and earlier, which stems from the HTTP server not properly cleaning up URI inputs, which...
CVE-2012-10022
Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48. The lxsuexec binary performs a uid check and permits execution of arbitrary commands as root if the invoking user matches uid 48. This flaw enables attacker...
CVE-2012-10020 FoxyPress <= 0.4.2.1 - Arbitrary File Upload
The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadify.php file in versions up to, and including, 0.4.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may...
WordPress FoxyPress plugin <= 0.4.2.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by WordFence in WordPress Plugin Foxypress versions 0.4.2.2...
CVE-2012-10019
The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...
Ubuntu: Security Advisory (USN-7622-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
June 10, 2025—KB5061059 (Monthly Rollup)
None None...
Microsoft Windows Storage Port Driver 安全漏洞
Microsoft Windows Storage Port Driver is a system-supplied storage port driver from Microsoft USA that is especially suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. A security vulnerability exists in the Microsoft Windows Storage Port Driver. A...
KB5062592: Windows Server 2012 Security Update (July 2025)
The remote Windows host is missing security update 5062592. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Untrusted pointer dereference in Windows Event Tracing allows an...
KB5062597: Windows Server 2012 R2 Security Update (July 2025)
The remote Windows host is missing security update 5062597. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Untrusted pointer dereference in Windows Event Tracing allows an...
CVE-2012-6428
creationtimestamp| type| source ---|---|--- 2025-07-01 20:09:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20077...
CVE-2012-6427
creationtimestamp| type| source ---|---|--- 2025-07-01 20:09:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20076...
CVE-2012-6437
creationtimestamp| type| source ---|---|--- 2025-06-30 23:06:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19990...