CVE-2020-37017

creationtimestamp| type| source ---|---|--- 2026-01-29 17:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlcc44yyc2g...

CVE-2020-37021

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup...

CVE-2020-37010

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search...

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

CVE-2020-37018

CVE-2020-37018 ffects GOautodial 4.0: a persistent cross-site scripting (XSS) vulnerability allows authenticated agents to inject malicious scripts via message subjects. Crafted messages with embedded JavaScript can execute when an administrator reads the message, potentially leaking session cook...

CVE-2020-37016

BarcodeOCR 19.3.6 is affected by an unquoted service path vulnerability that enables local privilege escalation. The unquoted path in the service configuration could allow an attacker to inject a malicious executable that runs with LocalSystem privileges during system startup. Connected sources c...

CVE-2020-37009 MedDream PACS Server 6.8.3.751 - Remote Code Execution

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevate...

CVE-2020-37010 BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search...

CVE-2020-37004 Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search paramete...

CVE-2020-37000

CVE-2020-37000 affects Free MP3 CD Ripper 2.8. The vulnerability is a stack buffer overflow in the WAV file handling that enables remote code execution on vulnerable Windows systems. Attacks require crafting a malicious WAV payload and can leverage an exploit file with shellcode, SEH bypass, and ...

EUVD-2020-30912

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overflowing the 'Archive To' input field. Attackers can craft a malicious payload that overwrites the Structured Exception Handler SEH and uses ...

CVE-2020-37001 Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attackers to execute arbitrary code by overflowing the 'Archive To' input field. Attackers can craft a malicious payload that overwrites the Structured Exception Handler SEH and uses ...

CVE-2020-36994

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionali...

CVE-2020-36950

Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server...

CVE-2020-36965

creationtimestamp| type| source ---|---|--- 2026-01-28 18:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiwnef2py23...

CVE-2020-36973

creationtimestamp| type| source ---|---|--- 2026-01-28 18:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiwefxql62n...

CVE-2020-36972

creationtimestamp| type| source ---|---|--- 2026-01-28 18:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiw3hkogc2i...

CVE-2020-36970

creationtimestamp| type| source ---|---|--- 2026-01-28 18:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdivjkpkwe2g...

CVE-2020-36969

creationtimestamp| type| source ---|---|--- 2026-01-28 18:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdivamalba2t...

CVE-2020-36970

PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter. Attackers can exploit the unsanitized file path input to access sensitive files like /etc/passwd by sending crafted requests to the...