22 matches found
CVE-2026-11475
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...
CVE-2026-11475 Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...
EUVD-2026-35006
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...
CVE-2026-11475
The CVE-2026-11475 affects Kushan2k student-management-system. Affects the function getStatus in controllers/GradeController.php of the Certificate Verification Endpoint. The underlying issue is that manipulating the nic argument can cause an SQL injection, enabling remote exploitation. Public ex...
CVE-2026-11475: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the file controllers/GradeController.php of the component Certificate Verification Endpoint. Executing a manipulation of...
PT-2025-45749
Jenkins MCP Server Plugin 0.84.v50ca 24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission getJobSc...
EUVD-2008-7273
Malware in sbrugna...
CVE-2008-20001
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
CVE-2008-20001
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
CVE-2008-20001
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
CVE-2008-20001 activePDF WebGrabber ActiveX Control Buffer Overflow
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
CVE-2008-20001
ActivePDF WebGrabber 3.8.2.0 is affected by a stack-based buffer overflow in the GetStatus() method of the APWebGrb.ocx ActiveX control. Passing an overly long string to this method can allow a remote attacker to execute arbitrary code in the context of the vulnerable process. Exploitation is pos...
CVE-2008-20001 activePDF WebGrabber ActiveX Control Buffer Overflow
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
CVE-2008-20001: Stack-based Buffer Overflow
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
ActivePDF WebGrabber 安全漏洞
ActivePDF WebGrabber is a server-side HTML/URL to PDF conversion control from ActivePDF open source. A security vulnerability exists in ActivePDF WebGrabber version 3.8.2.0, which stems from a stack buffer overflow in the GetStatus method of the APWebGrb.ocx ActiveX control, which could lead to t...
PT-2025-35363
Name of the Vulnerable Software and Affected Versions: activePDF WebGrabber version 3.8.2.0 Description: activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow in the GetStatus method of the APWebGrb.ocx ActiveX control. Passing an overly long string to this method can allow ...
Gather Quake Server Information
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gather Quake Server Information', 'Description' = %q This module uses the getstatus or getinfo request to obtain information from a Quakeserver. ...
PT-2024-7181
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ast udc getstatus function in the aspeed udc module of the Linux kernel's USB gadget driver. It involves incorrect index calculation, which could allow an...
DEBIAN-CVE-2010-5077
server/svmain.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service network traffic amplification via a spoofed 1 getstatus or 2 rcon request...
UBUNTU-CVE-2010-5077
server/svmain.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service network traffic amplification via a spoofed 1 getstatus or 2 rcon request...