CVE-2016-20056

creationtimestamp| type| source ---|---|--- 2026-04-04 14:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miohynzb5p2i...

CVE-2016-20059

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the...

CVE-2016-20055

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...

CVE-2016-20060

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious...

CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...

CVE-2016-20055 IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...

CVE-2016-20052

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snewsfiles directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by...

CVE-2016-15058

creationtimestamp| type| source ---|---|--- 2026-04-03 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimulfblib2t 2026-04-04 01:30:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3k5xk2c2q...

CVE-2016-15058

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is...

CVE-2016-20045

creationtimestamp| type| source ---|---|--- 2026-03-28 14:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4ule4jn72j 2026-04-09 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mizjxe2zol2d...

CVE-2016-20044

creationtimestamp| type| source ---|---|--- 2026-03-28 14:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4ujhjmo722 2026-04-11 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjagj365js2e...

CVE-2016-20047

creationtimestamp| type| source ---|---|--- 2026-03-28 14:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4txkn6zt23...

CVE-2016-20048

creationtimestamp| type| source ---|---|--- 2026-03-28 14:17:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4t4pdy6s2t...

CVE-2016-20046

creationtimestamp| type| source ---|---|--- 2026-03-28 14:05:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4sidqhkv24...

CVE-2016-20049

creationtimestamp| type| source ---|---|--- 2026-03-28 13:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4s63aty72o 2026-04-13 07:08:10+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mjecmn6dbn22 2026-04-22 15:07:08+00:00| seen|...

CVE-2016-20047

EKG Gadu 1.9pre+r2855-3+b1 contains a local buffer overflow vulnerability in the username handling that allows local attackers to execute arbitrary code by supplying an oversized username string. Attackers can trigger the overflow in the strlcpy function by passing a crafted buffer exceeding 258...

DEBIAN-CVE-2016-20048

iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized value to the -k/--key parameter. Attackers can craft a malicious argument containing a NOP sled, shellcode, and return address to overflow a 1024-byte...

CVE-2016-20042

TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can craft a malicious command-line argument with 156 bytes of padding followed by a return address to overwrite the...

DEBIAN-CVE-2016-20044

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the...

CVE-2016-20045

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return...