PT-2020-22415

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the functions ndpi add connection as bittorrent, ndpi int...

PT-2020-21890

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions search valid dns, ndpi search dns, and check ndpi udp flow func...

PT-2020-21975

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the functions ndpi search openvpn, check ndpi udp flow func, and ndpi detection...

PT-2020-21844

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which can cause a crash. The crash involves the ndpi netbios name interpret, ndpi int netbios add connection...

PT-2020-22535

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, which involve functions such as ndpi check...

PT-2020-21769

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves several functions: ndpi strnstr, ndpi search nats...

CVE-2017-18612

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...

Design/Logic Flaw

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...

PT-2019-8543

Name of the Vulnerable Software and Affected Versions wp-whois-domain plugin version 1.0.0 Description The issue concerns a problem with the wp-whois-domain plugin for WordPress, where there is a potential for XSS via the domain parameter in the "pages/func-whois.php" endpoint. Recommendations Fo...

CVE-2017-18612: Improper Neutralization of Input During Web Page Generation

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...

CVE-2016-10758

PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the imagename parameter...

PT-2019-7554

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.6 Description The issue allows for arbitrary file upload. This can be demonstrated by uploading a .php file to specific API endpoints, such as "pkinc/admin/mediaarchive.php" and "pkinc/func/default.php", via the image name...

CVE-2016-10758: Unrestricted Upload of File with Dangerous Type

PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the imagename parameter...

CVE-2019-7418: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...

PT-2019-18592

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS issue is present in the "/sws/swsAlert.sws" endpoint, affecting multiple parameters:...

CVE-2019-7402

An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...

PT-2019-6391

Name of the Vulnerable Software and Affected Versions uriparser versions prior to 0.9.1 Description The issue is related to an out-of-bounds read in the URI FUNC function within the UriParse.c component of the uriparser. This occurs when parsing an incomplete URI that contains an IPv6 address wit...

ThinkPHP 5.x Remote Code Execution

Exploit Title: ThinkPHP 5.x v5.0.23,v5.1.31 Remote Code Execution Date: 2018-12-11 Exploit Author: VulnSpy Vendor Homepage: https://thinkphp.cn Software Link: https://github.com/top-think/framework/ Version: v5.x below v5.0.23,v5.1.31 CVE: N/A Exploit...

PT-2018-12462

Name of the Vulnerable Software and Affected Versions GNU Libextractor versions prior to 1.7 Description The issue is related to a stack-based buffer overflow in the ec read file func function, located in unzip.c. Recommendations For GNU Libextractor versions prior to 1.7, update to version 1.7 o...

PT-2018-5072

Name of the Vulnerable Software and Affected Versions PHP FormMail Generator affected versions not specified Description The issue allows a remote unauthenticated user to bypass authentication and access the administrator panel. This can be achieved by navigating directly to the...