2429 matches found
CVE-2025-1520 PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability
PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
PT-2025-17614 · Unknown · Meon Kyc Solutions
Name of the Vulnerable Software and Affected Versions: Meon KYC solutions affected versions not specified Description: This issue exists due to the transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit th...
PCMan FTP Server CD Command Buffer Overflow Vulnerability
PCMan FTP Server is a lightweight FTP server software that provides basic file transfer functionality. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the CD Command Handler component failing to properly validate input data when processing a specific request. An...
NETGEAR WNR854T get_email Function Command Execution Vulnerability
The NETGEAR WNR854T is a wireless router from NETGEAR. A command execution vulnerability exists in the NETGEAR WNR854T version 1.5.2, which stems from the nvram parameter of the getemail function of the post.cgi file failing to correctly filter for constructed command special characters, commands...
CVE-2020-36844
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL...
Denial of Service Vulnerability in Fastfilm APP of Beijing Fastfilm Technology Co.
Fast Shadow App is a video shooting, video editing and video making tool. A denial-of-service vulnerability exists in the Fast Shadow APP of Beijing Racer Technology Company Limited, which can be exploited by attackers to cause a denial of service...
SAP NetWeaver Buffer Overflow Vulnerability
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. SAP NetWeaver suffers from a buffer overflow vulnerability that stems from improper handling of memory addresses, which could allow an attacker to execute certain forms of SQL queries. An attack...
CVE-2025-21573
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: Chatbot. Supported versions that are affected are 5.1.0.0.0, 6.1.0.0.0 and 7.0.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with...
CVE-2025-29041
An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the targetaddr key value and the function 0x41710c...
The vulnerability of the smb2_lock() function in the fs/smb/server/smb2pdu.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the smb2lock function in the fs/smb/server/smb2pdu.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2025-31941
An unauthenticated attacker can obtain a list of smart devices by knowing a valid username...
Mitsubishi Electric Europe B.V. smartRTU
RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete information in the product, or cause a denial-of service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take...
CVE-2025-33027
In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must vis...
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js Thi...
HDF5 H5FL__blk_gc_list function release post heap usage vulnerability
HDF5 Hierarchical Data Format version 5 is an open source library and file format for storing and organizing large amounts of data. The HDF5 H5FLblkgclist function releases a post heap usage vulnerability that can be exploited by an attacker to cause out-of-bounds reads and potentially crash an...
The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the SCSI component in the Linux operating system is related to incorrect blocking of resources in the cqthreadv3hw function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure
The vulnerability of the Linux operating system’s kernel media component is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for CVE-2025-3102
Vanda CVE-2025-3102 💣 Exploit com interface gráfica para a vuln...
CVE-2025-27191
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...
