25771 matches found
PT-2025-32306 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Tyler Technologies ERP Pro 9 SaaS affected versions not specified Description: The software allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment...
Introducing: The Metasploit Pro AD CS Metamodule
Introducing the AD CS Workflows MetaModule: Now Generally Available in Metasploit Pro We're excited to announce that the AD CS Workflows MetaModule has officially moved from early access to general availability in Metasploit Pro! This powerful new feature represents a significant advancement in...
CVE-2012-10031: Stack-based Buffer Overflow
BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...
BlazeVideo HDTV Player Pro has security vulnerabilities
BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...
D-Link DIR-823-Pro Telnet Access
The vulnerability of D-Link DIR-823-Pro wireless routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to Telnet services...
Ubiquiti's various products have security vulnerabilities
Ubiquiti UniFi Access Reader and others are products of Ubiquiti, U.S.A. Ubiquiti UniFi Access Reader is an access control system viewer device.Ubiquiti UniFi Access Intercom is an intercom system device. Ubiquiti UniFi Access Reader Pro is a card reader and access control intercom device. A...
CVE-2025-27212: Improper Input Validation
An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network. Affected Products: UniFi Access Reader Pro Version 2.14.21 and earlier UniFi Access G2 Reader Pro Version 1.10.32 and earlier UniFi...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-43018
Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book...
CVE-2025-7710: Authentication Bypass Using an Alternate Path or Channel
The Brave Conversion Engine PRO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers t...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
HP Color LaserJet MFP M478-M479 / LaserJet Pro MFP M428-M429 Printers Information Disclosure Vulnerability (HPSBPI04040)
Multiple HP LaserJet Pro printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREF...
PT-2025-31642 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.5.7 Description: Emlog Pro version 2.5.7 allows for unrestricted file uploads with dangerous file types via the /emlog/admin/plugin.php?action=upload zip API endpoint. Recommendations: At the moment, there is no informatio...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-44139: Unrestricted Upload of File with Dangerous Type
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-44139
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...
CVE-2025-44139
Emlog Pro version 2.5.7 is vulnerable to an Unrestricted Upload of File with Dangerous Type via the /emlog/admin/plugin.php?action=upload_zip API endpoint. This flaw allows an attacker to upload potentially malicious files to the system. The documents do not provide specific details regarding the...
