20 matches found
CVE-2026-34551
creationtimestamp| type| source ---|---|--- 2026-04-01 02:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miflwvexr32g...
CVE-2026-34551
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference NPD in CIccTagLut16::Write can be triggered when processing a crafted ICC profile embedded in a TIFF and extracted during iccTiffDump. This issue has...
CVE-2024-34551
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...
CVE-2024-34551 WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...
CVE-2024-34551
CVE-2024-34551 is an unauthenticated path traversal leading to PHP Local File Inclusion in the WordPress theme Stockholm (Stockholm Core) up to version 9.6. Multiple connected sources (NVD and CVE records) confirm: affected product is the Stockholm theme; vulnerability type is path traversal enab...
CVE-2024-34551 WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...
WordPress Stockholm Theme <= 9.6 is vulnerable to Local File Inclusion
Software Stockholm Type Theme Vulnerable versions = 9.6 Fixed in 9.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-34551 Patch priority High CVSS severity High 9 Developer Claim ownership PSID ba79b1de262f Credits Rafie Muhammad Patchstack Required privilege...
CVE-2023-34551
creationtimestamp| type| source ---|---|--- 2024-02-08 12:46:20+00:00| published-proof-of-concept| Telegram/2xp2HKwG4k-i-985uD9q3QFLiHE0U-cNCXCN5jcjj1A 2024-02-08 13:13:15+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/3672...
CVE-2023-34551
EZVIZ CVE-2023-34551 describes two stack buffer overflows in the netClientSetWlanCfg function of the EZVIZ SDK command server that allow an authenticated attacker on the same LAN to achieve remote code execution. Affected CS-C6N-B0-1G2WF, CS-C6N-R101-1G2WF, CS-CV310-A0-1B2WFR, CS-CV310-A0-1C2WFR-...
CVE-2022-34551
Sims v1.0 was discovered to allow path traversal when downloading attachments...
CVE-2022-34551
CVE-2022-34551 affects Sims v1.0 and is a path-traversal vulnerability in the attachments download function. The issue enables traversal of the file system when downloading attachments, potentially exposing sensitive data (C: high confidentiality impact stated). No explicit exploitation details a...
CVE-2022-34551
Sims v1.0 was discovered to allow path traversal when downloading attachments...
Fedora: Security Advisory for php-phpmailer6 (FEDORA-2021-bfc34b3d5c)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-7Q44-R25X-WM4Q Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
PHPMailer 6.4.1 contains a possible remote code execution vulnerability through the $langpath parameter of the setLanguage method. If the $langpath parameter is passed unfiltered from user input, it can be set to a UNC path, and if an attacker is also able to create a remote mount on the server...
CVE-2021-34551
PHPMailer prior to version 6.5.0 on Windows is vulnerable to remote code execution if lang_path is supplied from untrusted data and uses a UNC pathname. The root cause is loading language/translation files in a way that could execute code. Exploitation status is not detailed in the provided docum...
RCE affecting Windows hosts via UNC paths to translation files
This is a security release. SECURITY Fixes CVE-2021-34551, a complex RCE affecting Windows hosts. See SECURITY.md for details. The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in th...
Untrusted code may be run from an overridden address validator
This is a security release. SECURITY Fixes CVE-2021-34551, a complex RCE affecting Windows hosts. See SECURITY.md for details. The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in th...
Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...