CVE-2024-57440

D-Link DSL-3788 revA1 1.01R1B036EUEN is vulnerable to Buffer Overflow via the COMMMAKECustomMsg function of the webproc cgi...

CVE-2024-9686

The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfwsendtestmessage' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to send a test messa...

CVE-2024-34255: Improper Neutralization of Input During Web Page Generation

jizhicms v2.5.1 contains a Cross-Site ScriptingXSS vulnerability in the message function...

CVE-2024-34255

jizhicms v2.5.1 contains a Cross-Site ScriptingXSS vulnerability in the message function...

Design/Logic Flaw

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

CVE-2024-24278: Improper Control of Generation of Code

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

CVE-2024-24278

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

PT-2024-26743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the dm-raid component in the Linux kernel, where the sync thread is not properly frozen during suspend. This is caused by the removal of the MD RECOVERY FROZEN fl...

PT-2023-25502 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: Prestashop opartlimitquantity versions 1.4.5 and earlier Description: The issue concerns sensitive SQL calls in the OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage function that can be executed with a trivial HT...

Folding@home fah-control Security Vulnerability

fah-control is a Folding@home open source Client Advanced Control GUI. A security vulnerability exists in the Folding@home Client Advanced Control GUI that allows an attacker to execute arbitrary code by manipulating the parsemessage function...

Stored XSS on user "Write private message" function

Description An attacker can inject malicious executable scripts into the code of the message field. Proof of Concept Log in as a Member user, access Messages - Write private message function for sending admin a message.COde Insert this payload into the message field testscriptprompt'1'/script the...

CVE-2023-33253

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as shell.jpg.php.shell being...

CVE-2023-33253

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as shell.jpg.php.shell being...

CVE-2023-33253: Unrestricted Upload of File with Dangerous Type

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as shell.jpg.php.shell being...

PT-2023-24247 · Unknown · Labcollector

Name of the Vulnerable Software and Affected Versions: LabCollector versions 6.0 through 6.15 Description: The issue allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The problem is due to insufficient validati...

SUSE CVE-2019-10149

A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution...

PT-2022-33884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential memory leak issue exists in the mt76x02u mcu send msg function of the mt76x02u driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-12752 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A stack overflow issue was discovered in Jsish via the Jsi LogMsg function at src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, consider disabling the Jsi LogMsg function as a temporary workaround unti...

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

...

NCH IVM Attendant Remote Code Execution Vulnerability

NCH IVM Attendant is a complete voicemail, call attendant, and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which stems from the fact that if the pathname of a ZIP element is set to the Windows startup folder, a file with a built-in Out-Going Message function, or...