CVE-2024-57761

The JeeWMS warehouse management system (a JAVA-based system from China Huayi) is vulnerable to an arbitrary file upload vulnerability in the parserXML() method. This flaw affects versions prior to v2025.01.01 and allows an attacker to execute arbitrary code by uploading a specially crafted file. ...

UBUNTU-CVE-2024-52333

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

USN-7192-1 xfpt vulnerability

It was discovered that xfpt did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the application to crash or execute arbitrary code...

LibreOffice 路径遍历漏洞

LibreOffice is an open source office software suite from The Document Foundation. A path traversal vulnerability exists in LibreOffice versions prior to 24.8 through 24.8.4 that stems from a path traversal error and allows an attacker to write to an arbitrary location via a file in a specific...

CVE-2024-55074

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370...

Adaptive Substance 3D Modeler Heap Overflow

The vulnerability of the Adobe Substance 3D Modeler software-related to reading beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted file...

Adobe Media Encoder Buffer Overflow

The vulnerability of the Adobe Media Encoder application relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

eXpress communication system Document Viewer XSS

The vulnerability of the document viewer library in the web version of the eXpress communication system is due to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary Java Script code by sending a specially crafted file...

Adobe Substance 3D Modeler Buffer Overflow

The vulnerability of the Adobe Substance 3D Modeler software-related to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted file...

Adobe Substance 3D Modeler Buffer Overflow

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

Adobe Substance 3D Modeler Buffer Overflow

The vulnerability of the Adobe Substance 3D Modeler software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

CVE-2024-55078

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbitrary code via uploading a crafted file...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in FFmpeg n6.1.1, which can be exploited by a remote attacker to submit a special file and trick the user into parsing it, which can crash the...

PT-2026-3082

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the avi parse input file function. This issue can be triggered by processing a specially crafted AVI file, potentially leading to a Denial of Service DoS. Recommendations Update to a new...

PT-2025-34644 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

PT-2025-34630 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A heap-based buffer overflow exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious fi...

PT-2025-34639 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

PT-2025-34634

Name of the Vulnerable Software and Affected Versions: libbiosig version 3.9.0 libbiosig Master Branch 35a819fa Description: A stack-based buffer overflow exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The issue manifests on line 8719...

PT-2026-3066

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description An out-of-bounds read exists in the GSF demuxer filter component. Processing a specially crafted .gsf file can lead to a Denial of Service DoS. The issue involves reading data beyond allocated buffer boundaries...

PT-2025-34643 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability occur...