CVE-2019-25604

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

CVE-2019-25604

CVE-2019-25604 : DVDXPlayer Pro 5.5 has a local buffer overflow vulnerability in which crafted .plf playlist files can overflow a buffer and hijack the SEH chain to execute arbitrary code with application privileges. The issue relies on structured exception handling to gain code execution locally...

CVE-2019-25604 DVDXPlayer Pro 5.5 Local Buffer Overflow with SEH

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

DVDXPlayer Pro 缓冲区错误漏洞

DVDXPlayer Pro is a multimedia playback software developed by the DVDXPlayer company. Version 5.5 of DVDXPlayer Pro contains a buffer overflow vulnerability, which stems from a local buffer overflow. This vulnerability could allow local attackers to execute arbitrary code through a specially...

EUVD-2019-19858

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

EUVD-2019-19862

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

CVE-2019-25555

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

CVE-2019-25556

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer...

CVE-2019-25557

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

CVE-2019-25557 TwistedBrush Pro Studio 24.06 Denial of Service via srp File

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

CVE-2019-25557

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

CVE-2019-25557

TwistedBrush Pro Studio 24.06 is affected by a local DoS vulnerability: importing a malformed .srp script file via the Script Player can crash the application. An attacker would need local access and can craft an oversized .srp file to trigger the crash. The issue is described as a denial-of-serv...

CVE-2019-25557 TwistedBrush Pro Studio 24.06 Denial of Service via srp File

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file. Attackers can create a .srp file containing an excessively large buffer and import it through the Script Player interface to...

CVE-2019-25556

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer...

CVE-2019-25555 TwistedBrush Pro Studio 24.06 Script Recorder Denial of Service

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

CVE-2019-25556 TwistedBrush Pro Studio 24.06 Resize Image Denial of Service

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessively long buffer. Attackers can paste a malicious string into the New Width or New Height field to trigger a buffer...

CVE-2019-25556

CVE-2019-25556 concerns TwistedBrush Pro Studio 24.06. A denial-of-service vulnerability exists in the Resize Image function: supplying a maliciously long string in the New Width or New Height fields can trigger a buffer overflow and crash the application. The attack is local (no user interaction...

CVE-2019-25555 TwistedBrush Pro Studio 24.06 Script Recorder Denial of Service

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

CVE-2019-25555

TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by supplying an excessively large buffer. Attackers can paste a malicious string containing 500,000 characters into the Description field ...

EUVD-2026-13997

The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to initiate arbitrary outbound requests from the...