62 matches found
CVE-2026-108804
The TRENDnet TEW-751DR , TEW-752DRU , and TEW733GR routers (firmware versions 1.03B01/1.03B03 ) are vulnerable to an OS command injection in the Web Management Backend . The flaw exists within the fwrite function of the pigwidgeon.cgi file, where manipulating the service argument allows for remot...
CVE-2026-108804: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...
EulerOS 2.0 SP15 : patch (EulerOS-SA-2026-3998)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
JLSEC-2026-1260 GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified...
GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk single block of changes in diff data structures, causing the application to pass a NULL pointer...
CVE-2026-40909: Improper Limitation of a Pathname to a Restricted Directory
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the locale save endpoint locale/save.php constructs a file path by directly concatenating $POST'flag' into the path at line 30 without any sanitization. The $POST'code' parameter is then written verbatim to that path via...
CVE-2026-5041
A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the function fwrite of the file admin/pageMail.php. The manipulation of the argument mailSubject/mailMessage leads to command injection. The attack may be initiated remotely. The...
CVE-2026-5041
A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the function fwrite of the file admin/pageMail.php. The manipulation of the argument mailSubject/mailMessage leads to command injection. The attack may be initiated remotely. The...
CVE-2026-5041
CVE-2026-5041 affects code-projects Chamber of Commerce Membership Management System 1.0. The vulnerability is in the fwrite usage of admin/pageMail.php, where manipulating the arguments mailSubject/mailMessage enables command injection. The attack could be remote and publicly available exploit c...
CVE-2026-5041: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the function fwrite of the file admin/pageMail.php. The manipulation of the argument mailSubject/mailMessage leads to command injection. The attack may be initiated remotely. The...
CVE-2022-35007
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via interceptorfwrite.part.57 at sanitizercommoninterceptors.inc...
EUVD-2016-1256
Malware in sbrugna...
EUVD-2014-4984
Malware in sbrugna...
EUVD-2014-4982
Malware in sbrugna...
EUVD-2022-37905
Malicious code in bioql PyPI...
DEBIAN-CVE-2023-46426
Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service DoS via gffwrite component in at utils/osfile.c...
PT-2024-5530
Name of the Vulnerable Software and Affected Versions GPAC version 2.3-DEV-rev588-g7edc40fee-master Description The issue is related to a heap-based buffer overflow vulnerability in the gf fwrite component of the GPAC multimedia platform. This vulnerability can be exploited by a remote attacker t...
SUSE CVE-2016-10062
The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2022-35007
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via interceptorfwrite.part.57 at sanitizercommoninterceptors.inc...
PNG Dec: Buffer error vulnerability
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec that stems from a heap buffer overflow in interceptorfwrite.part.57 of the sanitizercommoninterceptors.inc file...
Storage Unit Rental Management System 1.0 - Remote Code Execution (Unauthenticated) Exploit
Exploit Title: Storage Unit Rental Management System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Fikrat Ghuliev Ghuliev Vendor Homepage: https://www.sourcecodester.com/php/14932/storage-unit-rental-management-system-using-php-free-source-code.html Software Link:...