36 matches found
CVE-2019-9193
CVE-2019–9193 - PostgreSQL 9.3-12.3 認証済みリモートコード実行 概念実証 PostgreSQL データベースのバージョン 9.3 から 12.3 最新のテスト済み は、認証済みリモートコード実行の影響を受けます。 開発チームによって脆弱性そのものとはみなされていませんが、これを悪用して誤構成されたシステムへのアクセスを得ることが可能です。 ヘルプメニュー 悪用例 参考文献 NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-9193 CVE Details:...
CVE-2019-9193
CVE-2019–9193 - PostgreSQL 9.6.1 リモートコード実行（認証済み） 概念実証（Proof of Concept） PostgreSQL データベースはバージョン 9.6.1 以降、認証済みリモートコード実行に対して脆弱です。 開発チーム自身はこれを脆弱性とは見なしていませんが、設定ミスのあるシステムへのアクセスを得るために悪用される可能性があります。 ヘルプメニュー 悪用例 参考情報 NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-9193 CVE Details:...
EZB Systems Softdisk 安全漏洞
EZB Systems Softdisk is a tool software developed by EZB Systems Corporation, used for creating and managing virtual disks and disk images. Version 3.0.3 of EZB Systems Softdisk contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration code dialog box,...
CVE-2019-25667
TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the New User Name or New Serial Number textboxes in the Help menu's registration...
CVE-2019-25665: Out-of-bounds Write
River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...
CVE-2026-1046
Mattermost Desktop App versions =6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577...
CVE-2026-1046 Arbitrary application execution via unvalidated server-controlled URLs in Help menu
Mattermost Desktop App versions =6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577...
CVE-2026-1046 Arbitrary application execution via unvalidated server-controlled URLs in Help menu
Mattermost Desktop App versions =6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577...
CVE-2026-1046
Mattermost Desktop App versions
PT-2026-8342
Name of the Vulnerable Software and Affected Versions Mattermost versions 5.2.13.0 and earlier, versions 6.0 and 6.2.0 and earlier Description The Mattermost Desktop App does not properly validate help links. This allows a malicious Mattermost server to execute arbitrary executables on a user’s...
CVE-2026-1046: Improper Authorization in Handler for Custom URL Scheme
Mattermost Desktop App versions =6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577...
CVE-2025-25539
Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu...
CVE-2025-25539: Improper Control of Filename for Include/Require Statement in PHP Program
Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu...
CVE-2025-25539
Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu...
PT-2025-22402
Name of the Vulnerable Software and Affected Versions Vasco versions 3.14 and earlier Description The issue allows a remote attacker to obtain sensitive information via the help menu. This is due to a Local File Inclusion vulnerability. Recommendations For versions 3.14 and earlier, consider...
Vasco Self-Service Portal 安全漏洞
Vasco Self-Service Portal is a self-service portal from Vasco, Inc. A security vulnerability exists in Vasco Self-Service Portal v3.14 and earlier versions, which originates from a local file inclusion in the Help menu and could lead to the disclosure of sensitive information...
Exploit for SQL Injection in Code-Projects Patient_Record_Management_System
CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept...
Exploit for SQL Injection in Valvepress Automatic
Badges !MIT Licensehttps://img.shields.io/badge/Licens...