ThinkPHP security vulnerabilities

ThinkPHP is a PHP-based, open-source, lightweight web application development framework from China Top Thinking Information Technology ThinkPHP. A security vulnerability exists in ThinkPHP version 5.0.24, which originates from a remote code execution vulnerability in the read function in the file...

CVE-2025-63888: Improper Control of Filename for Include/Require Statement in PHP Program

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...

EUVD-2020-14597

Malware in sbrugna...

EUVD-2016-3196

Malware in sbrugna...

EUVD-2019-7658

Malware in sbrugna...

EUVD-2019-7662

Malware in sbrugna...

EUVD-2020-17078

Malware in sbrugna...

EUVD-2020-23200

Malware in sbrugna...

EUVD-2008-5216

Malware in sbrugna...

EUVD-2019-17787

Malware in sbrugna...

EUVD-2021-12383

Malware in sbrugna...

EUVD-2023-50774

Malicious code in bioql PyPI...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the readWriteEpsMetadata function in the epsimage.cpp file. An attacker can cause a crash by tricking a user into processing a specially crafted EPS file. Note: This is only exploitable if metadata is being writte...

Linux Distros Unpatched Vulnerability : CVE-2019-20169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

OSV-2025-684 Heap-buffer-overflow in TGAHandler::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=440585455 Crash type: Heap-buffer-overflow WRITE 4 Crash state: TGAHandler::read kimgiofuzzer.cc...

Linux Distros Unpatched Vulnerability : CVE-2018-20452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2020-29371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd...

PT-2025-33758

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using intel pmt read for binary sysfs. This occurs when a pcidev is...

SAP MDM Server security vulnerabilities

SAP MDM Server is an MDM server from SAP, Germany. A security vulnerability exists in SAP MDM Server that stems from a memory read access violation triggered by the Read function when processing specially crafted packets, which could lead to an unexpected termination of the server process...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...