Lucene search
+L

599 matches found

GithubExploit
GithubExploit
•added 2026/03/11 3:04 p.m.•205 views

Exploit for Improper Authentication in Controlid Idsecure

CVE-2023-6329 — Control iD iDSecure Authentication Bypass !P...

9.8CVSS5.9AI score0.64996EPSS
SaveExploits6
CNNVD
CNNVD
•added 2026/03/11 12:00 a.m.•14 views

NewSoftwares Folder Lock 缓冲区错误漏洞

NewSoftwares Folder Lock is a comprehensive data security application developed by NewSoftwares in the United States. It allows you to protect your personal files, photos, videos, documents, contacts, wallet cards, notes, and recordings in iPhones with passwords. The version 7.7.9 of NewSoftwares...

6.9CVSS6.1AI score0.00123EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/11 12:00 a.m.•13 views

PT-2026-24767

Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized payload. Attackers can paste a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field ...

6.9CVSS6.2AI score0.00123EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/11 12:00 a.m.•1 views

CVE-2019-25469: Out-of-bounds Write

Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized payload. Attackers can paste a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field ...

6.9CVSS6.2AI score0.00123EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•15 views

CVE-2026-24932

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

8.9CVSS5.5AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/03 3:15 a.m.•15 views

CVE-2026-24932

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

5.9CVSS5.9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/03 2:19 a.m.•50 views

CVE-2026-24932

The CVE-2026-24932 issue is an improper TLS/SSL certificate hostname validation in ADM’s DDNS update function. The vulnerability allows a remote attacker to perform a Man‑in‑the‑Middle (MitM) attack over HTTPS, potentially exposing sensitive DDNS updating data such as the user’s email, MD5‑hashed...

8.9CVSS5.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/02/03 2:19 a.m.•18 views

EUVD-2026-5283

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

8.9CVSS5.5AI score0.00214EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/27 3:23 p.m.•15 views

EUVD-2020-30858

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/27 3:23 p.m.•21 views

CVE-2020-36940 Easy CD & DVD Cover Creator 4.13 - Denial of Service

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/27 3:23 p.m.•8 views

CVE-2020-36940

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/01/27 3:23 p.m.•29 views

CVE-2020-36940

CVE-2020-36940 affects Easy CD & DVD Cover Creator 4.13. A buffer overflow in the serial-number input field can crash the application when a ~6000-byte payload is pasted. The issue has PoC/exploit references in public material; no remediation is provided in the supplied documents. The CVSS data i...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2020-36940: Buffer Copy without Checking Size of Input

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/27 12:00 a.m.•17 views

PT-2026-4922

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00284EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•17 views

Easy CD & DVD Cover Creator has a security vulnerability

Easy CD & DVD Cover Creator is a CD/DVD cover creation software developed by Ben Williamson. Version 4.13 of Easy CD & DVD Cover Creator has a security vulnerability; this vulnerability stems from a buffer overflow in the serial number input field, which may cause the application to crash...

9.8CVSS6AI score0.00284EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/22 4:52 p.m.•11 views

EUVD-2026-4015

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matiskiba Ravpage ravpage allows Reflected XSS.This issue affects Ravpage: from n/a through = 2.33...

5.4AI score0.00208EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•11 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-58007)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58007 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds...

7.1CVSS6.7AI score0.0025EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/21 12:00 a.m.•9 views

Konica Bizhub Multifunction Printers Insertion of Sensitive Information into Externally-Accessible File or Directory (CVE-2024-51977)

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

5.3CVSS7.9AI score0.4663EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:13 a.m.•20 views

CVE-2022-0331

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older...

5.3CVSS6.7AI score0.01506EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/08 12:50 p.m.•22 views

EUVD-2026-1567

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability...

7.5CVSS6.6AI score0.016EPSS
SaveExploits1References4
Rows per page
Query Builder