4416 matches found
Windows Media Remote Code Execution Vulnerability
...
PT-2023-7705 · Apache · Apache Ofbiz
Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 18.12.10 Description: The issue is related to a pre-authentication remote code execution vulnerability in Apache OFBiz due to the presence of unmaintained XML-RPC. This vulnerability allows an attacker to execut...
Debian dla-3677 : gimp-dds - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3677 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/...
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Description The plugin loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users. PoC 1. As an admin, visit rtMedia Settings Export/Import. 2. Click the "Browse File" button beside "Import rtMedia Settings". 3. Upload a file with the...
CVE-2023-6312
A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is the function deleteuser of the file deleteUser.php of the component Users Page. The manipulation of the argument userid leads to sql injection. It is possible to launch the atta...
PT-2023-30907 · Fastbots · Fastbots
Name of the Vulnerable Software and Affected Versions: fastbots versions prior to 0.1.5 Description: The issue allows an attacker to modify the locators.ini locator file with Python code that, without proper validation, is executed and could lead to remote code execution RCE. The vulnerability is...
CVE-2023-6188 GetSimpleCMS theme-edit.php code injection
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
PT-2023-32479 · H2O · H2O
Name of the Vulnerable Software and Affected Versions: H2O affected versions not specified Description: The issue allows an attacker to gain remote code execution on a server hosting the H2O dashboard. This is achieved through the POJO model import feature. Recommendations: At the moment, there i...
PT-2023-7278 · Gimp +7 · Gimp +7
Name of the Vulnerable Software and Affected Versions: GIMP versions prior to 2.10.18-1ubuntu0.1 GIMP versions 2.10.22-4+deb11u1 and prior GIMP versions 2.10.34-1+deb12u1 and prior Description: GIMP contains a vulnerability related to an integer overflow within the parsing of PSP files. This flaw...
CVE-2023-39435 Zavio IP Camera Stack-Based Buffer Overflow
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently...
PT-2023-30394 · Qualitor · Qualitor
Name of the Vulnerable Software and Affected Versions: Qualitor versions prior to 8.21 Description: The issue allows remote attackers to execute arbitrary code. This can be achieved by injecting PHP code into the gridValoresPopHidden parameter in the...
Debian DSA-5545-1 : vlc - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5545 advisory. An out-of-bounds write was discovered in the MMS demuxer of the VLC media player. For the oldstable distribution bullseye, this problem has been fixed in version...
CVE-2023-46415
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...
PT-2023-29867
Name of the Vulnerable Software and Affected Versions D-Tale versions prior to 3.7.0 Description The issue allows remote code execution, enabling attackers to run malicious code on the server. This is particularly concerning for users hosting D-Tale publicly. The estimated number of potentially...
Medium: composer
Issue Overview: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has registerargcargv enabled in php.ini. Versions...
MGASA-2023-0290 Updated ghostscript packages fix security vulnerability
The updated packages fix a security vulnerability: In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated...
PT-2023-6013 · Fortinet · Fortisandbox
Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 2.4.1, 2.5.0 through 2.5.2, 3.0.0 through 3.0.7, 3.1.0 through 3.1.5, 3.2.0 through 3.2.4, 4.0.0 through 4.0.3, 4.2.0 through 4.2.5, 4.4.0, 4.4.1 Description: The issue exists due to improper neutralization of input duri...
CVE-2023-36592
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
