4065 matches found
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
CVE-2026-82785
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82782
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82770
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
EUVD-2026-77238
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82782
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
CVE-2026-82782
An out-of-bounds write vulnerability in CONPROSYS nano Series (Contec) allows a remote attacker with low privileges to send a specially crafted request that triggers a denial-of-service condition. The CVSS 3.1 score is 4.3 (MEDIUM) and CVSS 4.0 is 5.3 (MEDIUM) , reflecting a network-based attack ...
EUVD-2026-77235
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
EUVD-2026-77225
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
CVE-2026-82772 is a buffer overflow vulnerability in the web service of the Contec EC1000 series . A remote attacker with low privileges can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution . The vulnerability is rated HIGH severity...
EUVD-2026-77223
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82770
CVE-2026-82770 is a buffer overflow vulnerability in the Contec RP-WAH-SR Series (industrial I/O controller). A remote attacker with low privileges can send a specially crafted request to the product's web service to achieve arbitrary program execution . The CVSS 3.1 score is 8.8 (HIGH) with a ne...
CVE-2017-7529
CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...
CVE-2023-26984
CVE-2023-26984 Explicación de la vulnerabilidad: Un problema en la función de restablecimiento de contraseña de Peppermint v0.2.4 permite a los atacantes acceder a los correos electrónicos y contraseñas de la página de Tickets mediante una solicitud manipulada. Vectores de ataque: El atacante ten...
CVE-2022-4896
CVE-2022-4896 PoC y exploits para CVE-2022-4896 "Control de Ciber" es un software de gestión de cibercafés. Múltiples vulnerabilidades de Denegación de Servicio DoS en versiones anteriores a la 1.650. Un atacante remoto no autenticado puede enviar una solicitud cuidadosamente diseñada que provoca...
CVE-2023-27163
CVE-2023-27163 Request-Baskets v1.2.1 - falsificación de solicitudes del lado del servidor SSRF Se descubrió que request-baskets hasta v1.2.1 contiene una vulnerabilidad de falsificación de solicitudes del lado del servidor SSRF a través del componente /api/baskets/name. Esta vulnerabilidad permi...
CVE-2017-7529
CVE-2017-7529 Description Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Source:...
CVE-2025-31651-o
CVE-2025-31651 Para un subconjunto de configuraciones de reglas de reescritura poco probables, era posible que una solicitud especialmente diseñada eludiera algunas reglas de reescritura. Si esas reglas de reescritura aplicaban efectivamente restricciones de seguridad, esas restricciones podrían...
CVE-2023-3519
CVE-2023-3519 Esta plantilla de Nuclei verifica la presencia de la vulnerabilidad CVE-2023-3519 en un servidor web objetivo. Vulnerabilidad CVE-2023-3519 es una vulnerabilidad que permite la ejecución remota de código sin autenticación en los dispositivos Citrix Application Delivery Controller AD...