CVE-2023-44852

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the csettrapsdecode function in the acuweb file...

CVE-2023-44852

A Cross Site Scripting (XSS) vulnerability exists in Cobham SAILOR VSAT Ku v.164B019 . A remote attacker can execute arbitrary code by sending a crafted script to the c_set_traps_decode function within the acu_web file. As a temporary workaround, users are advised to disable the c set traps decod...

CVE-2023-44856

A Cross-Site Scripting (XSS) vulnerability exists in Cobham SAILOR VSAT Ku version v.164B019 . A remote attacker can execute arbitrary code by sending a crafted script to the rstat , sender , and recipients parameters within the sub_21D24 function of the acu_web file. This flaw allows an attacker...

CVE-2023-44855

A Cross-Site Scripting (XSS) vulnerability exists in Cobham SAILOR VSAT Ku version v.164B019 . The root cause is the improper neutralization of input during web page generation within the sub_219C4 function of the acu_web file. A remote attacker can exploit this by providing a crafted script thro...

CVE-2023-44857: Improper Control of Generation of Code

An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub21D24 function in the acuweb component...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code by providing a crafted script to the nwjs framework component. This vulnerability is associated with CWE-358 (Improperly Implemented Security Check for Standard). As a temporary workaround, users are advis...

CVE-2023-44856

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rstat, sender, and recipients' parameters of the sub21D24 function in the acuweb file...

CVE-2023-44853

\An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub219C4 function in the acuweb file...

CVE-2023-44857

An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub21D24 function in the acuweb component...

CVE-2023-44853

A remote code execution vulnerability exists in Cobham SAILOR VSAT Ku v.164B019 maritime satellite communications products. The flaw originates from the sub_219C4 function within the acu_web file, which allows an attacker to execute arbitrary code by providing a crafted script . As a temporary wo...

CVE-2023-44855

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdiag, sender, and recipients parameters of the sub219C4 function in the acuweb file...

CVE-2023-44854

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the csetrslogdecode function in the acuweb file...

CVE-2023-44854

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the csetrslogdecode function in the acuweb file...

PT-2024-13201 · Cobham · Cobham Sailor Vsat Ku

Name of the Vulnerable Software and Affected Versions: Cobham SAILOR VSAT Ku version 164B019 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the c set traps decode function in the acu web file. This is a Cross Site Scripting XSS issue...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574: Incorrect Default Permissions

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574

Wondershare Filmora v.13.0.51 and earlier versions are affected by an Insecure Permissions vulnerability. The installation creates a directory at C:\Users\%username%\AppData\Local\Wondershare\Wondershare NativePush with overly permissive ACLs, granting full access to all system users. A local att...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

PT-2024-21426

Name of the Vulnerable Software and Affected Versions Wondershare Filmora version 13.0.51 Description The issue allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe. This can be exploited by a local attacker. Recommendations For Wondershare Filmora...