CVE-2018-25211

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

EUVD-2018-21677

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

CVE-2018-25204

Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can send POST requests to the admin login endpoint with boolean-based blind SQL injection payloads in the username...

CVE-2018-25185

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25203

CVE-2018-25203 affects Online Store System CMS 1.0. The vulnerability is an SQL injection in the email field of index.php when action=clientaccess is supplied, allowing unauthenticated attackers to influence database queries and extract sensitive information via boolean-based blind or time-based ...

CLSA-2026-1774437715 capstone: Fix of CVE-2025-67873

CVE-2025-67873: fix heap buffer overflow in csinsn.bytes...

SUSE-SU-2026:20879-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: Update to PyJWT 2.12.1: - CVE-2024-53861: prevent partial matching of the Issuer field bsc1234038. - CVE-2026-32597: validate the crit Header Parameter defined in RFC 7515 bsc1259616. Changelog: Update to 2.12.1: - Add missing...

nfc: pn533: properly drop the usb interface reference on disconnect

...

Allok Video Splitter 缓冲区错误漏洞

Allok Video Splitter is a video splitting and editing tool developed by Allok Corporation. Version 3.1.1217 of Allok Video Splitter contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the License Name field, which may lead to denial of service or the...

PassFab Excel Password Recovery 缓冲区错误漏洞

PassFab Excel Password Recovery is a Excel file password recovery tool developed by PassFab Corporation. The version Excel Password Recovery Professional 8.2.0.0 contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the E-Mail and Registrations Code field, whic...

PT-2026-28505

Name of the Vulnerable Software and Affected Versions Fireshare versions prior to 1.5.2 Description Fireshare facilitates self-hosted media and link sharing. Version 1.5.1 contains an authenticated path traversal vulnerability in the chunked upload endpoint. The checkSum multipart field is used...

PT-2026-28256

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

PT-2026-28394

Name of the Vulnerable Software and Affected Versions Timo version 2.0.3 Description A Cross Site Scripting XSS issue exists in Timo version 2.0.3. The issue is triggered by manipulated links within the title field. Exploitation involves crafting malicious links that, when clicked, can execute...

traefik -- Multiple vulnerabilities

The traefik project releases a new version addressing multiple CVEs: CVE-2026-33433 BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField CVE-2026-33186 authorization bypass via missing leading slash in :path...

CVE-2026-30162

Cross Site Scripting xss vulnerability in Timo 2.0.3 via crafted links in the title field...

PT-2026-28252

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

PT-2026-28255

PassFab RAR Password Recovery 9.3.2 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a payload with a buffer overflow, NSEH jump, and shellcode, then paste it into...

Invoice Ninja 安全漏洞

Invoice Ninja is an open-source application developed by Invoice Ninja, featuring features for invoices, quotes, projects, and time tracking. Version 5.13.0 of Invoice Ninja contains a security vulnerability. This vulnerability stems from the project description field bypassing the XSS rejection...

CVE-2026-30162

Cross Site Scripting xss vulnerability in Timo 2.0.3 via crafted links in the title field...

Google Go 安全漏洞

Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from the American company Google. There is a security vulnerability in Google Go, which stems from the failure to correctly verify the length of fields, potentially leading to crashes...