CVE-2020-37179

APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...

CVE-2020-37179 APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service

APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...

CVE-2019-25311

The CVE concerns thesystem version 1.0, which contains a persistent cross-site scripting (XSS) vulnerability. Attackers can inject malicious scripts via multiple server input fields, specifically operating_system, system_owner, system_username, system_password, system_description, and server_name...

CVE-2019-25311 thesystem Persistent XSS

thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attackers can submit crafted script payloads in operatingsystem, systemowner, systemusername, systempassword,...

CVE-2025-13650

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is not necessary, but the action must be performed who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Surname’ parameter of the ‘Creat...

CVE-2025-13648

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...

CVE-2025-13648 STORED CROSS-SITE SCRIPTING (XSS) ON MICROCOM'S ZEUSWEB

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...

CVE-2025-13648 STORED CROSS-SITE SCRIPTING (XSS) ON MICROCOM'S ZEUSWEB

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is required who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the...

SQL Injection

Django is vulnerable to SQL injection. The vulnerability is due to improper sanitization of the band index parameter in RasterField lookups PostGIS backend, allowing remote attackers to inject malicious SQL through crafted raster queries...

CVE-2026-25496

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a stored XSS vulnerability exists in the Number field type settings. The Prefix and Suffix fields are rendered using the |md|raw Twig filter without proper escaping,...

Nsasoft ShareAlarmPro 安全漏洞

Nsasoft ShareAlarmPro is a network access monitoring software developed by the US company Nsasoft. Nsasoft ShareAlarmPro has a security vulnerability, which stems from a buffer overflow in the registration key field, potentially causing the application to crash...

PT-2026-7711

TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffer in the license key field. Attackers can generate a 6000-byte payload and paste it into the activation field to trigger an application crash...

Nsasoft Backup Key Recovery 安全漏洞

Nsasoft Backup Key Recovery is a product key recovery software developed by the US company Nsasoft. Version 2.2.5 of Nsasoft Backup Key Recovery contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration key field, which could lead to a denial-of-servic...

PT-2026-7683

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...

Allok Video Converter 安全漏洞

Allok Video Converter is a video encoding tool developed by Allok Corporation. Version 4.6.1217 of Allok Video Converter contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the License Name input field, which may allow for the execution of arbitrary code...

PT-2026-7695

Name of the Vulnerable Software and Affected Versions Dnss affected versions not specified Description A denial of service issue exists that allows attackers to crash the application. This occurs when a buffer overflow is triggered by entering a payload of 1000 characters into the Name input fiel...

Nsasoft GTalk Password Finder 安全漏洞

Nsasoft GTalk Password Finder is a password recovery tool developed by the US company Nsasoft. The version 2.2.1 of Nsasoft GTalk Password Finder contains a security vulnerability. This vulnerability stems from a buffer overflow in the Key field, which could lead to a denial-of-service attack...

PT-2026-7686

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive...

PT-2026-7710

Name of the Vulnerable Software and Affected Versions SpotMSN version 2.4.6 Description A denial of service issue exists in the registration name input field. An attacker can cause the application to crash by submitting a 1000-character payload into the Name field. Recommendations At the moment,...

PT-2026-7706

Name of the Vulnerable Software and Affected Versions SpotFTP version 3.0.0.0 Description A buffer overflow occurs in the registration key input field, which can lead to an application crash and denial of service. This happens when a payload of 1000 characters is entered into the Key field...