CVE-2020-37211

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37215 MSN Password Recovery 1.30 - Denial of Service

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and...

CVE-2020-37189

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash...

DigitalVolcano TaskCanvas 安全漏洞

DigitalVolcano TaskCanvas is a visualization task management and productivity tool developed by the British company DigitalVolcano. Version 1.4.0 of DigitalVolcano TaskCanvas contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration code input field,...

Nsasoft RemShutdown 安全漏洞

Nsasoft RemShutdown is a remote shutdown and management tool developed by the US company Nsasoft. Version 2.9.0.0 of Nsasoft RemShutdown contains a security vulnerability, which stems from a buffer overflow in the Name registration field. This vulnerability may lead to the application crashing...

Nsasoft SpotIM 安全漏洞

Nsasoft SpotIM is a password recovery tool developed by the US company Nsasoft. Version 2.2 of Nsasoft SpotIM contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration name input field, which may cause the application to crash...

PT-2026-7687

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash...

PT-2026-7703

Name of the Vulnerable Software and Affected Versions RemShutdown version 2.9.0.0 Description A denial of service issue exists where attackers can crash the application by overflowing the registration name field. This is achieved by pasting a 1000-character buffer payload into the Name field...

CVE-2020-37130

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name...

Nsasoft Nsauditor security vulnerabilities

Nsasoft Nsauditor is a network security software developed by the American company Nsasoft. Version Nsasoft Nsauditor 3.2.3 contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration code input field, which could lead to a denial-of-service attack...

CVE-2021-47813

Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a large buffer of 256 repeated characters into the registration key field to trigger application instability an...

CVE-2021-47785

CVE-2021-47785 affects Ether MP3 CD Burner 1.3.8. A buffer overflow in the registration name field enables remote code execution by overwriting SEH handlers to run a payload that can open a bind shell on port 3110. The available connected documents confirm the vulnerable component and impact but ...

CVE-2020-23184

A stored cross site scripting XSS vulnerability in /administration/settingsregistration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field...

SUP Online Shopping Security Breach

SUP Online Shopping is an online shopping website. A security vulnerability exists in SUP Online Shopping version v.1.0, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code via parameters such as Name in the Regist...

HTML Injection - real Aptabase emails

Description Due to lack of validation Name field during registration, bad actor can send emails with HTML injected code to the victims. Proof of Concept Payload example: Jameees Repro steps: Go to https://eu.aptabase.com/auth/register and for field 'Name' use payload with HTML. Open email from...

CVE-2022-1068

Modbus Tools Modbus Slave versions 7.4.2 and prior is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used...

Stack overflow

Modbus Tools Modbus Slave versions 7.4.2 and prior is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used...

Modbus Slave 缓冲区错误漏洞

Modbus Slave is a device simulator for PLCs, primarily for PLC programming. Modbus Slave has a security vulnerability that stems from susceptibility to a stack-based buffer overflow in the registration field. This can cause the program to crash when long strings are used...

CVE-2020-23184

A stored cross site scripting XSS vulnerability in /administration/settingsregistration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field...

Cross site scripting

A stored cross site scripting XSS vulnerability in /administration/settingsregistration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field...