Binarynights Forklift Security Breach

Binarynights Forklift is a file resource management software from the American company Binarynights. The software references the FINDER file manager and directly manages FTP/SFTP/WebDAV, Amazon S3, iDisk, BLUETOOH and other resources. A security vulnerability exists in BinaryNights ForkLift 3.x...

PT-2023-21656 · Unknown +1 · Moodle Lms +1

Name of the Vulnerable Software and Affected Versions: Moodle LMS affected versions not specified Description: The Mustache pix helper contained a potential Mustache injection risk if combined with user input. It is noted that this issue did not appear to be implemented or exploitable anywhere in...

squid: DoS in TLS handshake

A flaw was found in squid. A denial-of-service attack while processing TLS certificates is possible due to use of a potentially dangerous function in Squid and the default certificate validation helper. The highest threat from this vulnerability is to system availability...

NVIDIA GeForce Experience Uncontrolled Search Path Vulnerability

NVIDIA GeForce Experience is graphics card driver update software that helps to check your computer's geforce drivers and update them to the latest version. An uncontrolled search path vulnerability exists in the NVIDIA Web Helper NodeJS Web server in versions prior to NVIDIA GeForce Experience...

CVE-2020-5977

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

ClamXAV Data Forgery Issue Vulnerability

ClamXAV is a very powerful Mac antivirus program on the Mac os platform from the UK's clamxav. ClamXav for Mac not only scans for malware, but also performs real-time virus checking for your Mac, using the very popular ClamAV's open-source antivirus engine as a backend, and has the ability to...

CVE-2020-26893

An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 running with an injected malicious dylib to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28765)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause a denial of service in SSL-VPN and Proposed Helper Portal, which can lead to a firewall...

The vulnerability of the IEToEdge Browser Helper Object (BHO), a browser component of Microsoft Edge, allows a hacker to execute arbitrary code.

The vulnerability of the IEToEdge Browser Helper Object BHO, a component of the Microsoft Edge browser, is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

CVE-2020-26134

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...

CVE-2020-26134

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...

Cross site scripting

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

Cross site scripting

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...

CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

CVE-2020-26135

CVE-2020-26135 affects Live Helper Chat prior to version 3.44 and allows a reflected XSS via the setsettingajax PATH_INFO. The available connected docs confirm the vulnerability description but do not provide details on affected exact versions beyond “before 3.44v,” nor do they specify concrete e...

CVE-2020-26134

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...

CVE-2020-26134

Live Helper Chat before 3.44v is affected by a stored XSS in chat messages via BBCode, exploitable by an operator. A security update 3.44v addresses this vulnerability. No details on exploitation beyond the described stored XSS are provided in the supplied documents.

PT-2020-16309 · Live Helper Chat · Livehelperchat

Name of the Vulnerable Software and Affected Versions: Live Helper Chat versions prior to 3.44v Description: The issue allows reflected XSS via the setsettingajax PATH INFO. This can potentially lead to malicious script execution. Recommendations: For versions prior to 3.44v, update to version...