22 matches found
Exploit for Missing Encryption of Sensitive Data in Nginxui Nginx_Ui
CVE-2026-27944 PoC Description CVE-2026-27944 is an identi...
📄 Nginx UI 2.3.3 Backup Decryption Mass Scanner
This Python tool is a multi‑threaded scanner and exploitation utility designed to identify and validate the vulnerability CVE-2026-27944 affecting Nginx UI versions 2.3.2 and below. The script supports scanning single hosts, CIDR ranges, or target lists, and checks multiple common web service...
CVE-2026-27944
creationtimestamp| type| source ---|---|--- 2026-03-05 13:48:56+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762 2026-03-05 17:58:43+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116177864137232689 2026-03-05 19:19:04+00:00...
CVE-2022-27944
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference...
CVE-2024-27944
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected systems allow a privileged user to upload firmware files to the root installation directory of the system. By replacing specific files, an attacker could tamper specific files or even achieve remote code...
CVE-2023-27944
CVE-2023-27944 affects macOS sandboxing: the issue is that an app may break out of its sandbox. It is fixed via updates in macOS Ventura 13.3, Monterey 12.6.4, and Big Sur 11.7.5 (entitlements updated). The CVSS v3.1 metrics provided indicate a local, low-attack-complexity path with no privileges...
CVE-2023-27944
This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox...
macOS 12.x < 12.6.4 Multiple Vulnerabilities (HT213677)
The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.4. It is, therefore, affected by multiple vulnerabilities: - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...
Foxit PDF Editor < 11.2.3 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereferen...
CVE-2022-27944
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference...
CVE-2022-27944
CVE-2022-27944 affects Foxit PDF Reader before 12.0.1 and Foxit PDF Editor before 12.0.1, where an exportXFAData NULL pointer dereference is possible. Connected sources corroborate the issue across NVD/NCSC/Nessus entries. Impact described as NULL pointer dereference; no explicit exploit details ...
Foxit PDF Reader < 12.0.1 Multiple Vulnerabilities
According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 12.0.1. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer...
Foxit PDF Editor < 12.0.1 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 12.0.1. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL...
KLA12598 Multiple vulnerabilities in Foxit Reader
Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Null Pointer Dereference vulnerability can be exploited to cause...
CVE-2021-27944
creationtimestamp| type| source ---|---|--- 2021-08-26 16:26:46+00:00| seen| https://t.me/cibsecurity/27898...
CVE-2021-27944
Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access controls, allowing an unauthenticated threat actor to access privileged functionality, leading to OS command execution. The specific attack methodology is a file upload...
CVE-2021-27944
CVE-2021-27944 affects Vizio P65-F1 (firmware 6.0.31.4-2) and E50x-E1 (firmware 10.0.31.4-2). Unauthenticated access to multiple high‑privilege APIs allows privileged functionality use via a file upload, resulting in OS command execution. Root cause: lack of access controls on these APIs. Public ...
CVE-2020-27944
The CVE-2020-27944 entry concerns a memory corruption vulnerability in FontParser when processing maliciously crafted font files. Apple security disclosures (HT212003/HT212005/HT212009) indicate the issue could allow arbitrary code execution and is addressed by updates in watchOS 7.2, macOS Big S...
CVE-2020-27944
A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a...
About the security content of tvOS 14.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...