BulletProof FTP Server 安全漏洞

BulletProof FTP Server is an FTP server software developed by BulletProof Corporation. Version 2019.0.0.50 of BulletProof FTP Server contains a security vulnerability. This vulnerability stems from a denial-of-service attack in the DNS Address field, which could allow local attackers to cause the...

PT-2026-26994

Fast AVI MPEG Joiner 1.2.0812 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the License Name field. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the License Name inpu...

PT-2026-27003

Lavavo CD Ripper 4.20 contains a structured exception handling SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump...

Xlinesoft ASPRunner.NET 安全漏洞

XLineSoft Xlinesoft ASPRunner.NET is a web application development tool provided by the American company XLineSoft. Version 10.1 of Xlinesoft ASPRunner.NET contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in table name fields, which could allow...

PT-2026-26987

Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash wh...

PT-2026-27012

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer id/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the...

CVE-2019-25592: Improper Handling of Overlap Between Protected Memory Ranges

PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field. Attackers can paste a buffer of 10000 characters into the Name field during dashboard creation to trigger an...

CVE-2019-25591: Out-of-bounds Write

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code...

FTP Shell Server 缓冲区错误漏洞

FTP Shell Server is a secure file transfer server software developed by FTP Shell Inc. Version 6.83 of FTP Shell Server contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the account name field that needs to be prevented. It may allow local attackers to...

LabF Axessh 缓冲区错误漏洞

LabF Axessh is a security terminal client software developed by LabF Corporation. Version 4.2 of LabF Axessh contains a buffer overflow vulnerability. This vulnerability stems from a stack-based buffer overflow in the log file name field, which could allow local attackers to execute arbitrary cod...

PT-2026-26982

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

Alloksoft Fast AVI MPEG Joiner 缓冲区错误漏洞

Alloksoft Fast AVI MPEG Joiner is a video merging tool developed by Alloksoft Corporation. Version 1.2.0812 of Fast AVI MPEG Joiner contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow attack, which could allow local attackers to cause the application to crash...

PT-2026-26995

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute...

PT-2026-27004

AnMing MP3 CD Burner 2.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string. Attackers can paste a 6000-byte payload into the registration name field to trigger a denial of service condition...

PT-2026-27007

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite t...

PT-2026-26980

PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field. Attackers can paste a buffer of 10000 characters into the Name field during dashboard creation to trigger an...

Lavavo CD Ripper 缓冲区错误漏洞

Lavavo CD Ripper is an audio extraction tool developed by the Lavavo company. Version 4.20 of Lavavo CD Ripper contains a buffer overflow vulnerability, which stems from improper handling of structured exceptions and buffer overflows. This vulnerability could allow local attackers to execute...

CVE-2019-25606: Out-of-bounds Write

Fast AVI MPEG Joiner 1.2.0812 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the License Name field. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the License Name inpu...

CVE-2019-25616: Unrestricted Upload of File with Dangerous Type

AnMing MP3 CD Burner 2.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string. Attackers can paste a 6000-byte payload into the registration name field to trigger a denial of service condition...

CVE-2019-25599: Return of Pointer Value Outside of Expected Range

Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash wh...