CVE-2018-25211

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

CVE-2018-25211

The vulnerability affects Allok Video Splitter 3.1.1217 in the License Name field handling. A buffer overflow is triggered by an oversized input, with crafted payloads exceeding 780 bytes, leading to local denial of service or arbitrary code execution when the Register button is clicked. The issu...

CVE-2018-25211 Allok Video Splitter 3.1.1217 Buffer Overflow via License Name

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

CVE-2018-25211 Allok Video Splitter 3.1.1217 Buffer Overflow via License Name

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

EUVD-2026-16152

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can b...

CVE-2026-4862

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can b...

SUSE CVE-2026-3104

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

CVE-2026-4862 UTT HiPER 1250GW Parameter formConfigDnsFilterGlobal strcpy buffer overflow

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can b...

CVE-2026-4862

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file /goform/formConfigDnsFilterGlobal of the component Parameter Handler. Such manipulation of the argument GroupName leads to buffer overflow. The attack can b...

CVE-2026-23301

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip SDCA SoundWire Digital Control Adapter component. The findsdcaentityiot function fails to check for successful memory allocation when assigning an entity name. This vulnerability could allow a local...

CVE-2026-4849 code-projects Simple Laundry System Parameter modify.php cross site scripting

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is...

CVE-2026-4848

CVE-2026-4848 affects dameng100 muucmf 1.9.5.20260309. The vulnerability is in an unknown function of /admin/extend/list.html, where manipulating the Name parameter can cause cross-site scripting. Exploitation is remote, with a publicly disclosed exploit and PoC maturity indicated. No remediation...

CVE-2026-4848 dameng100 muucmf list.html cross site scripting

A vulnerability was determined in dameng100 muucmf 1.9.5.20260309. This affects an unknown function of the file /admin/extend/list.html. Executing a manipulation of the argument Name can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and...

EUVD-2026-16080

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /myaccount/addcostumer.php of the component Web Application Interface. Such manipulation of the argument costumername leads to cross site scripting. The attack may be...

CVE-2026-4835

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /myaccount/addcostumer.php of the component Web Application Interface. Such manipulation of the argument costumername leads to cross site scripting. The attack may be...

CVE-2026-4835

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /myaccount/addcostumer.php of the component Web Application Interface. Such manipulation of the argument costumername leads to cross site scripting. The attack may be...

PT-2026-28655

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions up to 3.2.7-210907-180535 Description A security issue has been identified in UTT HiPER 1250GW. A buffer overflow can occur due to manipulation of the GroupName argument within the strcpy function located in the...

Allok Video Splitter 缓冲区错误漏洞

Allok Video Splitter is a video splitting and editing tool developed by Allok Corporation. Version 3.1.1217 of Allok Video Splitter contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the License Name field, which may lead to denial of service or the...

Code-Projects Accounting System 代码注入漏洞

Code-Projects Accounting System is an accounting system open sourced by Code-Projects. Version 1.0 of the Code-Projects Accounting System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter costumername in the file /myaccount/addcostumer.php, whic...

PT-2026-28189

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /my account/add costumer.php of the component Web Application Interface. Such manipulation of the argument costumer name leads to cross site scripting. The attack may be...