CVE-2009-20009

Belkin Bulldog Plus Web Service Buffer Overflow (CVE-2009-20009): Belkin Bulldog Plus v4.0.2 build 1219 is affected by a stack-based buffer overflow in the web service authentication handler caused by insufficient validation of the oversized Authorization header. This leads to memory corruption a...

Belkin Bulldog Plus security vulnerabilities

Belkin Bulldog Plus is an uninterruptible power supply management software from Belkin Canada. A security vulnerability exists in Belkin Bulldog Plus version 4.0.2 build 1219, which stems from insufficient validation of the Authorization header by the Web Services Authentication Handler, and coul...

CVE-2009-20009: Stack-based Buffer Overflow

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...

Linux Distros Unpatched Vulnerability : CVE-2020-15397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users e.g., locations under...

CVE-2025-54080

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

AI Agentic Vulnerability Injection and Transformation with Optimized Reasoning

The increasing complexity of software systems and the sophistication of cyber-attacks have underscored the critical need for effective automated vulnerability detection and repair systems. Traditional methods, such as static program analysis, face significant challenges related to scalability,...

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

CVE-2025-7732 Lazy Load for Videos <= 2.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-video-title and href Attributes

The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insufficient input sanitization and output escaping. The plugin’s JavaScript registration handlers read the client‑supplied...

FoxCMS security vulnerabilities

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.6, which originates from improper handling of /index.php/plus, and could lead to a reflective cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2024-6844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The...

PT-2025-34907

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: FoxCMS is susceptible to a reflected Cross Site Scripting XSS issue in the /index.php/plus endpoint. Recommendations: As a temporary workaround, consider restricting access to the /index.php/plus endpoint unt...

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

CVE-2025-55422

The content management system FoxCMS version 1.2.6 is vulnerable to a reflected Cross Site Scripting (XSS) vulnerability located in the /index.php/plus endpoint. This flaw stems from the improper handling of input during web page generation, potentially allowing an attacker to execute malicious s...

Linux Distros Unpatched Vulnerability : CVE-2019-20797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as...

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

Security Bulletin: Vulnerabilities in Node.js, Angular.js, Golang Go, Java, MongoDB, Linux kernel may affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Node.js, Angular.js, Golang Go, Java, MongoDB Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, remote execution of arbitrary code on the system, and bypassing security...

Abseil-cpp Integer Overflow Info Disclosure

The vulnerability of the open library for extending the standard C++ library Abseil-cpp is related to a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information...

Solaris 10 (i386): 152716-14

SunOS 5.10: Oracle Developer Studio 12.6x86: Patch for C++ Compiler 5.15. Date this patch was last updated by Sun : Jan/18/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description...

Solaris 10 (sparc): 152715-14

SunOS 5.10: Oracle Developer Studio 12.6: Patch for C++ Compiler 5.15. Date this patch was last updated by Sun : Jan/18/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255274;...