19 matches found
CVE-2024-50848
CVE-2024-50848: XXE in the WorldServer v11.8.2 An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 might lead to access sensitive system information and execute arbitrary commands via supplying a crafted .tmx file. To...
EUVD-2018-20436
Malware in sbrugna...
Arbitrary Command Injection
Overview @translated/lara-mcp is a Lara API official MCP server Affected versions of this package are vulnerable to Arbitrary Command Injection via the importTmx function in importtmx.ts. An attacker can execute arbitrary system commands by supplying crafted input to the tmxurl parameter, which i...
aos-prov (>=2.2.0.dev0, <=3.0.1), owasp-zap-historic-parser (0.1.7) +2 more potentially affected by CVE-2025-47273 via setuptools (47.3.2)
setuptools PYPI version 47.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aos-prov =2.2.0.dev0, =0.4.0a2, =1.0.0, =1.0.2 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...
CVE-2024-50848
An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file...
CVE-2024-50848
An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file...
CVE-2024-50848
RWS WorldServer v11.8.2 is vulnerable to an XML External Entity (XXE) vulnerability within the Import object and Translation Memory import functionalities. An authenticated attacker can exploit this by supplying a crafted .tmx file containing a malicious payload. This can lead to the disclosure o...
CVE-2024-50848
An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file...
CVE-2024-50848
An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file...
CVE-2024-50848: Improper Restriction of XML External Entity Reference
An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file...
tmx-808.de Cross Site Scripting vulnerability OBB-1434517
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-1000631: Improper Neutralization of Special Elements used in an SQL Command
Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::userinfo function, which could allow the attacker to view, add, modify or delete information in the back-end database...
UBUNTU-CVE-2018-8828
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmxpretran.c...
CVE-2018-8828
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmxpretran.c...
ALPINE-CVE-2018-8828
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmxpretran.c...
CVE-2018-8828
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmxcheckpretran function in modules/tmx/tmxpretran.c...
PT-2018-18648
Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 4.4.7 Kamailio versions 5.0.x prior to 5.0.6 Kamailio versions 5.1.x prior to 5.1.2 Description A Buffer Overflow issue was discovered. A specially crafted REGISTER message with a malformed branch or From tag trigger...
TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking
TeamMate Audit Management Software Suite - mfc71enu.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: TeamMate Audit Management Software Suite DLL Hijacking Date:...
TeamMate Audit Management Software Suite - 'mfc71enu.dll' DLL Hijacking
/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban ,Ganesha, Dinesh Arora Site : www.beenuarora.com Exploit Title: TeamMate Audit Management Software Suite DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , TeamMate Audi...