23 matches found
CVE-2026-22762
Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this...
EUVD-2024-17100
Malicious code in bioql PyPI...
EUVD-2024-17103
Malicious code in bioql PyPI...
CVE-2025-3073
Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2024-7967
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
LaborOfficeFree 19.10 - MySQL Root Password Calculator
Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346 Google Dork: N/A Date: 09/02/2023 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.laborofficefree.com/ Software Link: https://www.laborofficefree.com/plans Version: 19.10 Tested on...
Exploit for Weak Password Requirements in Laborofficefree
CVE-2024-1346 Weak MySQL database root password in LaborOffice...
CVE-2024-1346
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...
CVE-2024-1344
Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...
Directory traversal
A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...
CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...
CVE-2024-1343 Weak permission vulnerability in LaborOfficeFree
A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...
LaborOfficeFree Security Vulnerability
LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. LaborOfficeFree version 19.10 suffers from a security vulnerability that stems from allowing an attacker to read usernames and passwords from the database...
LaborOfficeFree Security Vulnerability
LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. A security vulnerability exists in LaborOfficeFree version 19.10 that originates from a vulnerability that allows an attacker to calculate the root password of a MySQL database using two constants...
LaborOfficeFree Security Vulnerability
LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. A security vulnerability exists in LaborOfficeFree version 19.10, which stems from a vulnerability that allows an attacker to brute-force break the root password...
PT-2024-4032 · Unknown · Laborofficefree
Name of the Vulnerable Software and Affected Versions: LaborOfficeFree version 19.10 Description: The issue affects the executable files LOF service.exe and LaborOfficeFree.exe, allowing an attacker to read and extract the username and password from the database. This can lead to unauthorized...
LaborOfficeFree Access Control Error Vulnerability
LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. An access control error vulnerability exists in LaborOfficeFree version 19.10 that originates from allowing an authenticated user to read backup files in a directory...
LaborOfficeFree 19.10 MySQL Root Password Calculator
Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346 Google Dork: N/A Date: 09/02/2023 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.laborofficefree.com/ Software Link: https://www.laborofficefree.com/plans Version: 19.10 Tested on...
CVE-2023-0471
Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Accusoft ImageGear缓冲区错误漏洞
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A security vulnerability exists in Accusoft ImageGear version 19.10 that stems from an error in the IGXMPXMLParser::parseDelimiter function. A remote attacker could use a specially crafted PSD fil...