EUVD-2026-109158

A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...

CVE-2026-115800

A path traversal vulnerability exists in UbiquitousLearning mllm versions up to 2.0.2 . The flaw is located in the load_model function within the pymllm/mobile/convertor/__init__.py file of the Convertor component. By manipulating the shard_file argument, a local attacker can perform path travers...

@tarojs/cli-convertor (4.2.1-beta.0), @tarojs/create-app (4.2.1-beta.0) potentially affected by unknown CVE via @tarojs/cli (4.2.1-beta.0)

@tarojs/cli NPM version 4.2.1-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @tarojs/cli and may be impacted: - @tarojs/cli-convertor 4.2.1-beta.0 - @tarojs/create-app 4.2.1-beta.0 Source cves: unknown CVE Source advisory:...

@tarojs/cli-convertor (4.1.12-beta.47), @tarojs/create-app (4.1.12-beta.47) potentially affected by unknown CVE via @tarojs/cli (4.1.12-beta.47)

@tarojs/cli NPM version 4.1.12-beta.47 is affected by a known vulnerability. The following packages have a transitive dependency on @tarojs/cli and may be impacted: - @tarojs/cli-convertor 4.1.12-beta.47 - @tarojs/create-app 4.1.12-beta.47 Source cves: unknown CVE Source advisory:...

MAL-2026-6726 Malicious code in db-convertor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480b95a12688a84f3efd3d4c5c8a82c5c761f1f462eb22201f4385fb9bf691c index.js defines a method queryDBConnect on the exported DivbloxDatabaseConnector class that base64-decodes a hardcoded constant HASHKEY to the URL...

Malicious Package

Overview db-convertor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in db-convertor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480b95a12688a84f3efd3d4c5c8a82c5c761f1f462eb22201f4385fb9bf691c index.js defines a method queryDBConnect on the exported DivbloxDatabaseConnector class that base64-decodes a hardcoded constant HASHKEY to the URL...

CVE-2019-25362

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

CVE-2019-25363: Stack-based Buffer Overflow

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized license input. Attackers can generate a 6000-byte payload and paste it into the 'License Name and License Code' field to trigger an...

CVE-2019-25362: Out-of-bounds Write

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

Malicious code in Bе.Vlaandеren.Basisregisters.Utilities.HexByteConvertor (NuGet)

--- -= Per source details. Do not edit below this line.=-...

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service

Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service Vendor Homepage:https://www.alloksoft.com/ Software Link: https://www.alloksoft.com/wmv.htm Exploit Author: Nithoshitha S Tested Version: v4.6.1217 Tested on: Windows 7 x64 Windows XP SP3 1.- Run python code :poc.py 2.-...

Sinking a ship and hiding the evidence

Our earlier work on Voyage Data Recorder manipulation got us thinking about how a malicious individual or organisation might bring about the demise of a ship and hide the evidence. There are plenty of ways to get malware on to a ship. Whether it’s via satcoms, phishing, USB, crew Wi-Fi, dodgy DVD...

All to All Audio Convertor 2.0 - Files Stack Overflow PoC

No description provided by source. ! /usr/bin/python All to All Audio Convertor files stack overflow poc Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATEN - [email protected] - B3hz4d - Cdef3nder EAX 10624DD3 ECX 00000000 EDX 012200C0...

Microsoft Group Convertor DLL Hijacking Exploit (imm.dll)

No description provided by source. / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora Exploit Title: Microsoft Group Convertor DLL Hijacking imm.dll Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: grp Compile and rename ...

phpBB3 Unified Convertor Framework PHP Code Injection

PhpBB3 Unified Convertor Framework suffers from a PHP Code Injection in installation path. By default it should be disabled but you can find open installation path's by dorking it or seeking for dir's. Title: phpBB3 Unified Convertor Framework PHP Code Injection Date: 12.12.13 Contact:...

Microsoft Group Convertor - imm.dll DLL Hijacking

Microsoft Group Convertor - imm.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora Exploit Title: Microsoft Group Convertor DLL Hijacking imm.dll Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: grp...

Microsoft Group Convertor DLL Hijacking Exploit (imm.dll)

Exploit for windows platform in category local exploits ========================================================= Microsoft Group Convertor DLL Hijacking Exploit imm.dll ========================================================= / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly,...

Microsoft Group Convertor - 'imm.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora Exploit Title: Microsoft Group Convertor DLL Hijacking imm.dll Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: grp Compile and rename to imm.dll, create a file in the sa...

All to All Audio Convertor 2.0 - Files Stack Overflow (PoC)

All to All Audio Convertor 2.0 - Files Stack Overflow PoC ! /usr/bin/python All to All Audio Convertor files stack overflow poc Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATEN - [email protected] - B3hz4d - Cdef3nder EAX 10624DD3 ECX...