CVE-2021-3998: Out-of-bounds Read

A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...

PT-2022-2035

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in the realpath function of glibc, which can mistakenly return an unexpected value. This issue is related to memory release errors and can potentially lead to information leaka...

CVE-2021-42261: Improper Limitation of a Pathname to a Restricted Directory

Revisor Video Management System VMS before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of...

CVE-2020-9697: Missing Release of Memory after Effective Lifetime

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation could lead to memory leak...

Adobe Acrobat < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002,...

Adobe Reader < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002,...

iChat 1.6 Cross Site Scripting

Exploit Title: iChat 1.6 XSS Vunlerability Google Dork:N/A Date: 2020-05-06 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/ichat-realtime-php-live-support-system/20758162?srank=2 Version: 1.6 Tested on: 5.4.0-kali4-amd64...

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

WS-2017-3751

In vim, “src/edit.c” v7.0b to v8.0.0529, there is a potential buffer overflow vulnerability using invalidated parameters that affects the destination memory address, and can lead to a disclosure of sensitive data or crashing the service...

WS-2016-7086

In google/closure-library, v20160106 to v20160713 there is a potential vulnerability due to insufficient validation, that could lead to a src URL being assigned to an element that’s not of the correct type. An attacker can pass dangerous elements that will cause disclosure of sensitive data...

WordPress TheCartPress Plugin 1.3.9 - Multiple Vulnerabilities

Exploit for php platform in category web applications Product: TheCartPress WordPress plugin Vendor: TheCartPress team Vulnerable Versions: 1.3.9 and probably prior Tested Version: 1.3.9 Advisory Publication: April 8, 2015 without technical details Vendor Notification: April 8, 2015 Public...

LotusCMS 3.0.3 - Multiple Vulnerabilities

Vulnerability ID: HTB22886 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22558 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...