316 matches found
CVE-2020-37184 Allok Video Converter 4.6.1217 - Stack Overflow (SEH)
Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite SEH handlers and execute system commands by injecting malicious bytecode into the...
CVE-2020-37183 Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)
Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload in the License Name input field to trigger a buffer overflow...
CVE-2020-37183
CVE-2020-37183 affects Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 and is described as a stack overflow vulnerability that allows arbitrary code execution by overwriting Structured Exception Handler (SEH) registers. The description states an attacker can input a crafted payload in the Licens...
CVE-2020-37183 Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)
Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload in the License Name input field to trigger a buffer overflow...
CVE-2020-37185: Buffer Copy without Checking Size of Input
Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...
CVE-2020-37179: Buffer Copy without Checking Size of Input
APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...
CVE-2020-37212: Buffer Copy without Checking Size of Input
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...
Nsasoft BlueAuditor 安全漏洞
Nsasoft BlueAuditor is a Bluetooth network auditing and monitoring tool developed by the US company Nsasoft. Version 1.7.2.0 of Nsasoft BlueAuditor contains a security vulnerability. This vulnerability stems from a buffer overflow in the Name input field, which could lead to a denial-of-service...
PT-2026-7699
Name of the Vulnerable Software and Affected Versions NetShareWatcher version 1.5.8.0 Description A buffer overflow occurs in the registration name input, which can lead to an application crash. This happens when a payload of 1000 characters is entered into the 'Name' field. Recommendations At th...
CVE-2020-37209: Buffer Copy without Checking Size of Input
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...
CVE-2020-37188: Buffer Copy without Checking Size of Input
SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive...
Nsasoft Dnss Domain Name Search Software 安全漏洞
Nsasoft Dnss Domain Name Search Software is a domain name search and analysis tool developed by the American company Nsasoft. The Nsasoft Dnss Domain Name Search Software has a security vulnerability, which stems from a buffer overflow in the Name input field. This vulnerability may cause the...
CVE-2020-37195: Buffer Copy without Checking Size of Input
BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...
CVE-2026-2154
A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown function of the file /registration.php of the component Patient Registration Module. The manipulation of the argument First Name leads to cross site scripting...
Celestial AbsoluteTelnet 安全漏洞
Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.12 of Celestial AbsoluteTelnet contains a security vulnerability, which stems from improper handling of the license name input field. This vulnerability could lead to...
Celestial AbsoluteTelnet 安全漏洞
Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.12 of Celestial AbsoluteTelnet contains a security vulnerability, which stems from improper handling of the license name input field. This vulnerability could lead to...
CVE-2020-37126
Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attackers to overwrite Structured Exception Handler SEH registers. Attackers can exploit the vulnerability by crafting a malicious Unicode input that triggers an access violation and...
CVE-2020-37130 Nsauditor 3.2.0.0 - 'Name' Denial of Service
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name...
CVE-2020-37130
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name...
CVE-2026-1953
Nukegraphic CMS v3.1.2 contains a stored cross-site scripting XSS vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to properly sanitize user input in the name field before storing it in the database and rendering it across multiple CMS...