CVE-2025-24677: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...

PT-2025-5497 · WordPress · Wpspins Post/Page Copying Tool

Name of the Vulnerable Software and Affected Versions: WPSpins Post/Page Copying Tool versions 0 through 2.0.3 Description: The issue is related to improper control of code generation, allowing remote code inclusion due to a code injection flaw. This enables remote code inclusion, posing a...

CVE-2024-13502

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

CVE-2024-13502

CVE-2024-13502 affects Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM. The issue is an OS command injection caused by improper neutralization: the commit_multicast web interface page passes untrusted input to an eval in a bash script, enabling arbitrary shell commands (Local Code...

CVE-2024-13502 A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands.

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

CVE-2024-13503

CVE-2024-13503 affects Newtec NTC2218, NTC2250 and NTC2299 on Linux (PowerPC/ARM). A stack buffer overflow in the swdownload binary is caused by an unrestricted sscanf in the parse_INFO function, reading an incoming network packet into a fixed-size buffer. This leads to arbitrary code execution w...

CVE-2024-13503 Stack-Based Buffer Overflow in Newtec's update signaling causes RCE

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM Updating signaling process in the swdownload binary modules allows Local Execution of Code, Remote Code Inclusion. This issue affects NTC2218, NTC2250,...

PT-2025-2192 · Newtec · Newtec/Idirect Ntc2299 +2

Name of the Vulnerable Software and Affected Versions: Newtec/iDirect NTC2218, NTC2250, NTC2299 versions 1.0.1.1 through 2.2.6.19 Description: The issue affects the commit multicast page in the modem's web administration interface, which improperly parses incoming data from the request before...

CVE-2024-13502: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

CVE-2024-13503: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM Updating signaling process in the swdownload binary modules allows Local Execution of Code, Remote Code Inclusion. This issue affects NTC2218, NTC2250,...

CVE-2024-11838

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11838

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11838 Local File Inclusion

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11838 Local File Inclusion

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from the US-based PlexTrac, Inc. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1, which stems from the presence of a filename or path external control vulnerability that allows an attacker to achie...

PT-2024-17285 · Plextrac · Plextrac

Name of the Vulnerable Software and Affected Versions: PlexTrac versions 1.61.3 through 2.8.1 Description: The issue affects PlexTrac due to an external control of file name or path vulnerability, allowing local code inclusion through the use of an undocumented API endpoint. Recommendations: For...

CVE-2024-11838: External Control of File Name or Path

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

[SECURITY] [DLA 3984-1] zabbix security update

Debian LTS Advisory DLA-3984-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:5.0.45+dfsg-1+deb11u1 CVE ID : CVE-2024-36464 CVE-2024-42330 CVE-2024-42331 CVE-2024-42332 CVE-2024-42333 Debian...

Debian dla-3984 : zabbix-agent - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3984 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3984-1 [email protected]...

Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series

ABB has fixed vulnerabilities in ABB ASPECT, NEXUS Series and MATRIX Series Specifically for versions up to 3.08.02. The vulnerabilities include unauthorized access to files on the Web server, which can lead to data leakage or unauthorized data manipulation. In addition, serious vulnerabilities...