Lucene search
K

6 matches found

CVE
CVE
added 2026/05/04 12:47 a.m.7 views

CVE-2026-42369

GV-VMS V20 WebCam Server contains a stack overflow in the b64decoder path of the gvapi flow. The decoded base64 string is copied into a 256-byte local Buffer without bounds checking, so if the decoded data exceeds 256 characters an attacker can trigger a stack overflow. The product is described a...

10CVSS6.2AI score0.00201EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/08/06 2:53 a.m.2 views

SUSE CVE-2025-52903

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In version 2.32.0, the Command Execution feature of File Browser only allows the execution of shell command which have been predefined on a...

8CVSS8.1AI score0.01332EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/06/26 6:16 p.m.4 views

CVE-2025-52903 File Browser Allows Execution of Shell Commands That Can Spawn Other Commands

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In version 2.32.0, the Command Execution feature of File Browser only allows the execution of shell command which have been predefined on a...

8CVSS8.2AI score0.01332EPSS
Exploits1References4
Packet Storm
Packet Storm
added 2018/05/15 12:0 a.m.49 views

Signal Desktop HTML Injection

Title: HTML tag injection in Signal-desktop Date Published: 14-05-2018 CVE Name: CVE-2018-10994 Class: Code injection Remotely Exploitable: Yes Locally Exploitable: No Vendors contacted: Signal.org Vulnerability Description: Signal-desktop is the standalone desktop version of the secure Signal...

0.00323EPSS
Exploits3
exploitpack
exploitpack
added 2015/12/23 12:0 a.m.17 views

PHP 7.0.0 - Format String

PHP 7.0.0 - Format String Overview -------------------------------------------- A fun little format string vulnerability exists in PHP 7.0.0 due to how non-existent class names are handled. From my limited research I believe this issue is likely exploitable for full code execution see test script...

Exploits0
ThreatPost
ThreatPost
added 2012/01/23 8:0 p.m.108 views

Revamped Pwn2Own to Offer $105K in Prizes, Cash From Google for Chrome 0-Days

The Pwn2Own contest at the CanSecWest conference has become one of the landmark events on the calendar each year, as researchers gather with nervous vendors in a tiny room to see who can own which browser on which platform and how quickly. But this year’s contest will have a much different look...

9.3CVSS8.8AI score0.94354EPSS
Exploits33References3
Rows per page
Query Builder