Pixarra Tree Studio 安全漏洞

Pixarra Tree Studio is a tool developed by the American company Pixarra, focused on capturing natural growth and plant morphology. Version 2.17 of Pixarra Tree Studio contains a security vulnerability, which stems from the improper data input via the keyboard interface. This vulnerability could...

maccms 访问控制错误漏洞

MacCMS is a comprehensive and powerful website building system developed under the PHP+MySQL environment by MagicBlack. Version MacCMS 2025.1000.4052 contains a security vulnerability related to access control. This vulnerability stems from the lack of authentication for the Timming API Endpoint...

Pixarra Luminance Studio 安全漏洞

Pixarra Luminance Studio is a digital painting software developed by the American company Pixarra. It focuses on creating works in the “organic block-style” style, suitable for concept art, illustrations, textures, backgrounds, and the rendering of natural forms. Version 2.17 of Pixarra Luminance...

Pixarra Paint Studio 安全漏洞

Pixarra Paint Studio is a digital painting software developed by the American company Pixarra. It focuses on the “traditional painting and refinement” style, emphasizing classic media effects such as oil painting, colored pencil, watercolor, and the ability to refine details. Version 2.17 of...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: S...

EUVD-2019-19975

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

EUVD-2019-19932

jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string through the URL input handler. Attackers can trigger the crash by pasting a buffer of 5000 characters into the Open URL dialog, causin...

CVE-2019-25617 Ease Audio Converter 5.30 Denial of Service via Audio Cutter

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

CVE-2019-25617

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

CVE-2019-25618

AdminExpress 1.2.5 is affected by a local-denial-of-service in the System Compare feature. An attacker can submit oversized input in the Folder Path field, sending a large buffer of characters to trigger the comparison function and cause the application to become unresponsive or crash. This is a ...

CVE-2019-25617

The CVE-2019-25617 entry involves Ease Audio Converter 5.30, specifically the Audio Cutter function. A crafted MP4 file with an oversized buffer can be loaded via the Audio Cutter interface, enabling a local attacker to crash the application (denial of service). The issue is described as a local,...

CVE-2019-25612

CVE-2019-25612 affects Admin Express 1.2.5.485. It describes a local SEH buffer overflow in the Folder Path field triggered via the System Compare feature, where a crafted payload can execute shellcode with application privileges. Public references include Exploit-DB, confirming exploit availabil...

CVE-2019-25602

GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an...

CVE-2019-25602 GSearch 1.0.1.0 Denial of Service via Search Input

GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an...

CVE-2019-25602

CVE-2019-25602 affects GSearch 1.0.1.0. A denial of service exists where an attacker can crash the application by entering a very long string in the search bar (a 2000-character buffer) and selecting a result, triggering a crash. The vulnerability is local in scope with low attack complexity and ...

CVE-2026-4544

CVE-2026-4544 affects Wavlink WL-WN578W2 221110. The vulnerability is in the POST Request Handler’s /cgi-bin/login.cgi, where manipulating the argument homepage/hostname/login_page can trigger cross-site scripting. Exploitation is possible remotely, and public exploit activity is indicated. No ve...

CVE-2019-25586

Removed by vendor...

PT-2026-26987

Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash wh...

PT-2026-26982

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

UltraVNC Launcher 缓冲区错误漏洞

UltraVNC Launcher is a launcher for the remote control software developed by UltraVNC Corporation. Version 1.2.2.4 of UltraVNC Launcher contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the Path vncviewer.exe attribute field, which could allow local attacke...