52 matches found
PT-2026-117483
A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same check of the file ipt SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address...
CVE-2026-71880
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection...
CVE-2026-71879
Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...
CVE-2026-71878
Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...
EUVD-2026-61140
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection...
CVE-2026-71880 Server-side template injection in Integrated Publishing Toolkit
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection...
EUVD-2026-61130
Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...
EUVD-2026-61129
Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...
PT-2026-77247
Name of the Vulnerable Software and Affected Versions GBIF Integrated Publishing Toolkit versions prior to 3.3.4 Description An authentication bypass exists because the initial setup functionality remains exposed after the setup process is completed. This allows remote authenticated attackers to...
PT-2026-77272
Name of the Vulnerable Software and Affected Versions GBIF Integrated Publishing Toolkit versions prior to 3.3.4 Description Remote authenticated attackers can access server-side files and state through template injection. This occurs because the template engine improperly interprets untrusted...
EUVD-2025-209785
The affected applications contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27349, ZDI-CAN-27389...
CVE-2025-12659 Heap-based buffer overflow in Siemens Simcenter Femap
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process...
CVE-2025-12659
CVE-2025-12659 affects Siemens Simcenter Femap. A memory corruption flaw occurs while parsing specially crafted IPT files, allowing code execution in the context of the current process. The issue is triggered during IPT file handling within the affected application, with an attacker able to lever...
CVE-2025-12659 Heap-based buffer overflow in Siemens Simcenter Femap
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process...
Siemens Simcenter Femap security vulnerabilities
Siemens Simcenter Femap is a cutting-edge engineering simulation application developed by German company Siemens. It is used for creating, editing, and importing/reusing mesh-based finite element analysis models for complex products or systems. Siemens Simcenter Femap has a security vulnerability...
CVE-2025-12659: Heap-based Buffer Overflow
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process...
Siemens Simcenter Femap
SUMMARY Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could be triggered when the application reads files in IPT format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to...
Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2020-36933
HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...