CVE-2018-25227 Valentina Studio 9.0.4 Denial of Service via Host Parameter

Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host parameter during serv...

CVE-2018-25227 Valentina Studio 9.0.4 Denial of Service via Host Parameter

Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characters into the Host parameter during serv...

CVE-2018-25227

Valentina Studio 9.0.4 is affected by a local-denial-of-service vulnerability where an excessively long Host field triggers a crash. The issue can be exploited by pasting a 256-byte buffer of repeated characters into the Host parameter during server connection attempts. The connected records conf...

CVE-2018-25226

FTPShell Server 6.83 is affected by a buffer overflow in the account name field of the Manage FTP Accounts interface. A 417-byte payload pasted into the Account name to ban parameter can trigger a denial of service, allowing a local attacker to crash the application. The advisory notes a local at...

CVE-2018-25226 FTPShell Server 6.83 Denial of Service via Account Name

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to ban' parameter...

CVE-2018-25226 FTPShell Server 6.83 Denial of Service via Account Name

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to ban' parameter...

WordPress WP Job Portal plugin <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via Resume Custom File Field vulnerability discovered by daroo in WordPress Plugin WP Job Portal versions = 2.4.9...

PT-2026-29016

Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Computer Name field. Attackers can paste a malicious payload into the Computer Name input field and click Activate to trigger a denial ...

KubePlus 安全漏洞

KubePlus is a Kubernetes multi-tenant application management platform developed by cloud-ark. KubePlus 4.1.4 contains security vulnerabilities, which stem from server-side request forgery and command injection during the processing of the chartURL field by the mutating webhook and...

FreeRDP 安全漏洞

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.24.2 contained a security vulnerability. This vulnerability stemmed from the unvalidated network read of the authlength field, which could trigger assertion failures. This could cau...

SmartFTP Client 安全漏洞

SmartFTP Client is a graphical file transfer client software developed by SmartFTP Corporation. Version 9.0.2615.0 of SmartFTP Client contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in the host field, which could allow local attackers to cause th...

Core FTP/SFTP Server 缓冲区错误漏洞

Core FTP/SFTP Server is a file transfer server software developed by Core FTP Corporation. Version 1.2 of Core FTP/SFTP Server contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the user domain field, which could allow attackers to cause the service to crash...

PT-2026-29021

🚨 CVE-2018-25235 NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by entering a crafted usernam...

PT-2026-29020

🚨 CVE-2018-25234 SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to...

PT-2026-29010

Name of the Vulnerable Software and Affected Versions Core FTP/SFTP Server version 1.2 Description Core FTP/SFTP Server version 1.2 contains a buffer overflow issue that allows attackers to disrupt the service by providing a long string in the User domain field. Attackers can insert a malicious...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

NetworkActiv Web Server 缓冲区错误漏洞

NetworkActiv Web Server is a lightweight web server software developed by NetworkActiv Corporation. Version 4.0 of NetworkActiv Web Server contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the username field of the security options, which could allow loc...

Eusing Free IP Switcher 缓冲区错误漏洞

Eusing Free IP Switcher is an open-source network configuration switching tool developed by Eusing. Version 3.1 of Eusing Free IP Switcher contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the computer name field, which could allow local attackers to cau...

Codeorigin FTPShell Server 缓冲区错误漏洞

Codeorigin FTPShell Server is a security file transfer server software developed by Codeorigin Corporation. Version 6.83 of Codeorigin FTPShell Server contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the account name field, which could allow local...

PT-2026-29030

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update details.php file. The application fails to sanitize the "website" parameter provided in a POST request. This allows authenticated attackers to inject...