483 matches found
PT-2026-30622
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-5003 PromtEngineer localGPT Web api_server.py handle_index information disclosure
A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the function handleindex of the file ragsystem/apiserver.py of the component Web Interface. Performing a manipulation results in information disclosure. It is possible to initiate the...
CVE-2019-25360
Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed payload. Attackers can exploit the vulnerability by creating a malformed log file with carefully constructed SEH...
FinalWire Aida64 Engineer 安全漏洞
FinalWire Aida64 Engineer is a system information diagnosis and benchmarking tool provided by FinalWire Corporation. Version 6.10.5200 of FinalWire Aida64 Engineer contains a security vulnerability. This vulnerability stems from a buffer overflow in the CSV log configuration, which may allow remo...
CVE-2019-25360: Stack-based Buffer Overflow
Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed payload. Attackers can exploit the vulnerability by creating a malformed log file with carefully constructed SEH...
PT-2026-20535
Name of the Vulnerable Software and Affected Versions Aida64 Engineer version 6.10.5200 Description Aida64 Engineer version 6.10.5200 contains a buffer overflow in the CSV logging configuration. This allows attackers to execute malicious code by creating a specially designed payload. Exploitation...
Former Google Engineer Convicted of Stealing AI Secrets for China
A 38 year old was convicted on seven counts of economic espionage and seven counts of theft of trade secrets following an 11 day trial...
CVE-2025-67264
An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710...
PT-2026-4525
Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ affected versions not specified Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This i...
CVE-2025-15429
CVE-2025-15429 affects UTT 进取 512W 1.7.7-171114. The vulnerability is in the function strcpy of /goform/formConfigCliForEngineerOnly, where manipulating the addCommand argument can trigger a buffer overflow. This may allow remote, unauthenticated code execution; exploitation is publicly disclosed...
CVE-2025-15429 UTT 进取 512W formConfigCliForEngineerOnly strcpy buffer overflow
A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCliForEngineerOnly. Such manipulation of the argument addCommand leads to buffer overflow. It is possible to launch the attack remotely. The...
UTT 512W 安全漏洞
The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formConfigCliForEngineerOnly, which could result in a buffer overflow...
PT-2026-1048
Name of the Vulnerable Software and Affected Versions UTT 进取 512W version 1.7.7-171114 Description A security issue exists in UTT 进取 512W 1.7.7-171114. The strcpy function within the /goform/formConfigCliForEngineerOnly file is susceptible to a buffer overflow when the addCommand argument is...
Elena Lazar: Failures are Inevitable – Reliability is a Choice
Reliability engineer on why resilience must be designed, not patched, and how decades of global experience taught her to turn outages into insights...
CVE-2025-10555
A stored Cross-site Scripting XSS vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-10555
CVE-2025-10555 is a stored XSS vulnerability in DELMIA Service Process Engineer (Release 3DEXPERIENCE R2025x). The issue affects Service Items Management and could allow an attacker to execute arbitrary script in a user’s browser session. Documented impact indicates high severity with user intera...
CVE-2025-10555 Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting XSS vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-10555: Improper Neutralization of Input During Web Page Generation
A stored Cross-site Scripting XSS vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
Generex UPS Adapter CS141 Improper Limitation of a Pathname to a Restricted Directory (CVE-2020-11420)
UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by doing this achieve access to files and directories outside the web root folder. An attacker may acce...