CVE-2022-36967

In Progress WSFTP Server prior to version 8.7.3, multiple reflected cross-site scripting XSS vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScript into a WSFTP administrator's web session. This would allow the attacker to...

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99261)

A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...

Google Chrome 资源管理错误漏洞

A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...

CVE-2018-3834

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going t...

UBUNTU-CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...