CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Code injection

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Design/Logic Flaw

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

Buffer overflow

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

Cross site scripting

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-23037

CVE-2020-23037 affects Portable Ltd Playable v9.18. A code injection vulnerability exists in the filename parameter that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST request. The issue is rooted in the filename handling and, per linked documents, is demonstrated ...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23052

Summary : CVE-2020-23052 affects Catalyst IT Ltd Mahara CMS v19.10.2. The vulnerability is a multiple cross-site scripting (XSS) issue in the component groupfiles.php , exploitable via the Number (Nombre) and Description (Descripción) parameters. The connected documents provide consistent descrip...

CVE-2020-28963

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-36485

Portable Ltd Playable v9.18 contains an arbitrary file upload vulnerability in the filename parameter of the upload module, allowing arbitrary code execution via a crafted JPEG file. Root cause noted as insufficient validation in the upload filename handling; mitigation/remediation details are no...

CVE-2020-28963: Buffer Copy without Checking Size of Input

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

PT-2021-12059

Name of the Vulnerable Software and Affected Versions: Portable Ltd Playable version 9.18 Description: The issue allows attackers to execute arbitrary code via a crafted JPEG file, exploiting an arbitrary file upload vulnerability in the filename parameter of the upload module. Recommendations: F...

PT-2021-10814

Name of the Vulnerable Software and Affected Versions Portable Ltd Playable version 9.18 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted POST request, exploiting a code injection vulnerability in the filename parameter. Recommendations For Portable Lt...

CVE-2020-23037: Improper Control of Generation of Code

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

PT-2021-11612

Name of the Vulnerable Software and Affected Versions: Passcovery Co. Ltd ZIP Password Recovery version 3.70.69.0 Description: A buffer overflow issue was discovered in the decompress function. Recommendations: For version 3.70.69.0, at the moment, there is no information about a newer version th...