Lucene search
+L

1633 matches found

Positive Technologies
Positive Technologies
added 2026/02/12 12:00 a.m.19 views

PT-2026-7921

FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload that triggers a buffer overflow when pasted into the Custom Command textbox, enabling remot...

9.8CVSS7.1AI score0.00695EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/11 8:36 p.m.3 views

CVE-2020-37176 Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open...

9.8CVSS6.8AI score0.00435EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/11 8:36 p.m.31 views

CVE-2020-37176 Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open...

9.8CVSS0.00435EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/11 8:36 p.m.8 views

CVE-2020-37176

Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open...

9.8CVSS6.8AI score0.00435EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/11 8:36 p.m.22 views

CVE-2020-37176

CVE-2020-37176 affects Torrent 3GP Converter 1.51, with a stack overflow in SEH handling that can be triggered via a crafted payload in the registration dialog. The underlying cause is a buffer overflow that overwrites Structured Exception Handler registers, enabling arbitrary code execution and,...

9.8CVSS6.8AI score0.00435EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/01 3:19 p.m.17 views

CVE-2025-14554

The Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'orderformdata' AJAX action in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS6AI score0.00331EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/31 1:24 p.m.9 views

CVE-2025-14554

The Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'orderformdata' AJAX action in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS6AI score0.00331EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/01/31 12:30 a.m.11 views

EUVD-2020-30936

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...

8.4CVSS6.6AI score0.00195EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/31 12:00 a.m.17 views

PT-2026-5543

Name of the Vulnerable Software and Affected Versions Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress versions prior to 1.5. Description The Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress is susceptible to Stored Cross-Site Scripting through the orderform data...

7.2CVSS5.7AI score0.00331EPSS
SaveExploits0References13
NVD
NVD
added 2026/01/30 11:16 p.m.14 views

CVE-2020-37036

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS0.00209EPSS
SaveExploits0References4
NVD
NVD
added 2026/01/30 11:16 p.m.13 views

CVE-2020-37042

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...

8.4CVSS0.00195EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/30 10:07 p.m.32 views

CVE-2020-37042

Frigate Professional 3.36.0.9 contains a local buffer overflow in the Find Computer input field, enabling arbitrary code execution when a crafted payload overflows the computer name. In all connected sources, the vulnerability is demonstrated by launching the calculator as a proof of concept. The...

8.4CVSS6.6AI score0.00195EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/30 10:07 p.m.7 views

CVE-2020-37036

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS6.4AI score0.00209EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/30 10:07 p.m.39 views

CVE-2020-37031 Simple Startup Manager 1.17 - 'File' Local Buffer Overflow

Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory through the 'File' input parameter. Attackers can craft a malicious payload with 268 bytes to trigger code execution, bypassing DEP and overwriting memo...

8.6CVSS0.00167EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.23 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/24 12:59 a.m.40 views

CVE-2026-24405 iccDEV has Heap Buffer Overflow in CIccMpeCalculator::Read()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccMpeCalculator::Read. This occurs when user-controllable input is unsafely incorporated into ICC profile...

8.8CVSS0.00545EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/23 3:16 p.m.15 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.36 views

CVE-2026-24630 WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.2.9...

6.5CVSS0.00138EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.1.8...

6.5CVSS5.9AI score0.00138EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/23 2:29 p.m.38 views

CVE-2026-24630

CVE-2026-24630 is a Stored XSS in WordPress Stylish Cost Calculator plugin (

6.5CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder