55 matches found
CVE-2025-6331
creationtimestamp| type| source ---|---|--- 2025-06-20 10:44:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18930...
CVE-2025-6331 PHPGurukul Directory Management System search-directory.php sql injection
A vulnerability classified as critical was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-directory.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched...
CVE-2025-6331
CVE-2025-6331 affects PHPGurukul Directory Management System v1.0. The vulnerability is an SQL injection in the /admin/search-directory.php endpoint, caused by unsafely handling the searchdata parameter. The issue can be exploited remotely and the exploit has been publicly disclosed, potentially ...
CVE-2020-6331
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2024-6331
stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read LFI by Prompt Injection. The integration of Google Gimini 1.0 Pro with HarmBlockThreshold.BLOCKNONE for HarmCategory.HARMCATEGORYHATESPEECH and HarmCategory.HARMCATEGORYHARASSMENT i...
CVE-2024-6331
creationtimestamp| type| source ---|---|--- 2024-08-04 02:47:52+00:00| seen| https://t.me/cvedetector/2405...
CVE-2024-6331 Injection by Prompt Injection in stitionai/devika
stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read LFI by Prompt Injection. The integration of Google Gimini 1.0 Pro with HarmBlockThreshold.BLOCKNONE for HarmCategory.HARMCATEGORYHATESPEECH and HarmCategory.HARMCATEGORYHARASSMENT i...
CVE-2024-6331
CVE-2024-6331 affects stitionai/devika: Local File Read via Prompt Injection on the main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f. The issue stems from prompt-injection allowing execution of commands that can read sensitive files (e.g., /etc/passwd) due to HarmBlockThreshold.B...
CVE-2023-6331
creationtimestamp| type| source ---|---|--- 2024-01-29 14:47:33+00:00| seen| https://t.me/truesecator/5347...
Ubuntu: Security Advisory (USN-6331-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-41105
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...
CVE-2020-6331
CVE-2020-6331 affects SAP 3D Visual Enterprise Viewer 9 via the HPGL parsing component (hpgl plugin). The root cause is improper input validation in HPGL file handling, which can lead to an out-of-bounds write and, per ZDI, remote code execution; other sources note the issue can crash the applica...
CVE-2020-6331
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2019-6331
The CVE-2019-6331 issue affects Samsung Mobile Print (Android)
CVE-2018-6331
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...
CVE-2018-6331
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...
CVE-2018-6331
The Buck CVE-2018-6331 issue concerns the Buck parser-cache command, which loads/saves state using Java serialized objects. If the serialized state is maliciously crafted, deserializing it could lead to code execution. Affected products/versions: Buck versions prior to v2018.06.25.01. This is tie...
CVE-2018-6331
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...
CVE-2018-14311
CVE-2018-14311 affects Foxit Reader (and Foxit PhantomPDF) via a type confusion in XFA event handling. The flaw arises from improper validation of user-supplied data, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires user interaction...
CVE-2018-14311
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...