72 matches found
CVE-2026-80335
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges...
EUVD-2026-116698
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges...
CVE-2026-80335
A vulnerability exists in the bootloader download module of Unisoc (Shanghai) Technologies Co., Ltd. products. The issue is caused by a failure to reset a global offset variable during firmware update sessions, leading to a possible out-of-bounds write . This flaw could result in heap memory corr...
CVE-2025-67274
An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...
PT-2026-4773
Name of the Vulnerable Software and Affected Versions aangine version 2025.2 Description An issue allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, and portfolio-item-service dat...
CVE-2025-67274
An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints...
EUVD-2007-5033
Malware in sbrugna...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
EUVD-2025-3061
Malicious code in bioql PyPI...
EUVD-2023-0818
Malicious code in bioql PyPI...
EUVD-2025-32300
Malicious code in bioql PyPI...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2025-60452
A stored Cross-Site Scripting (XSS) vulnerability exists in MetInfo CMS version 8.0 within the download management module, specifically in the appin\system\download\admin\ emp\\download_admin.class.php (or appin\system\download\admin\ emp\\download_admin.class.php) component. The root cause is ...
PT-2025-40521
Name of the Vulnerable Software and Affected Versions MetInfo CMS version 8.0 Description A stored Cross-Site Scripting XSS issue exists in the download management module of the software. The vulnerability is located in the appsystemdownloadadmindownload admin.class.php component. Attackers can...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2023-30196
Prestashop salesbooster = 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php...