CVE-2019-25598

CVE-2019-25598 affects HeidiSQL Portable 10.1.0.5464. A denial-of-service vulnerability exists where an excessively long string supplied in the password field during Microsoft SQL Server login can overflow a buffer and crash the application. The attack is local and requires the attacker to intera...

PT-2026-26986

HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer overflow payload into the password input during Microsoft SQL Server login to...

CEWE PHOTO SHOW 安全漏洞

CEWE PHOTO SHOW is a photo display software developed by the British company CEWE. Version 6.4.3 of CEWE PHOTO SHOW contains a security vulnerability. This vulnerability stems from an overly long buffer for password fields. Attackers could exploit this to cause the application to crash by enterin...

PT-2026-26895

Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an...

CVE-2026-25196

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is...

CVE-2026-25196 Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is...

CVE-2026-2980

A vulnerability has been found in UTT HiPER 810G up to 1.7.7-1711. Impacted is the function strcpy of the file /goform/setSysAdm. The manipulation of the argument passwd1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

aidigu 安全漏洞

Aidigu is an open-source Weibo project developed by SR. Li lty628 as a personal project. The aidigu v1.9.1 version contains a security vulnerability. This vulnerability stems from the lack of validation on the password input field in the /tools/Password/add page, which may lead to cross-site...

CVE-2025-70846

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS on the /tools/Password/add page in the input field password...

CVE-2019-25339

CVE-2019-25339 affects GHIA CamIP 1.2 for iOS. The vulnerability is a denial-of-service in the password input field where pasting a 33-character buffer of repeated characters can crash the application on iOS devices. The provided metrics indicate a high severity under CVSS 3.1/4.0 with local/NETW...

PT-2026-7938

GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to crash the application. Attackers can paste a 33-character buffer of repeated characters into the password field to trigger an application crash on iOS devices...

GHIA CamIP 安全漏洞

GHIA CamIP is a mobile monitoring application developed by the GHIA company. GHIA CamIP has a security vulnerability, which stems from a denial-of-service vulnerability in the password input field. This vulnerability could allow attackers to cause the application to crash...

EUVD-2020-31037

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can overwrite the password field with 257 bytes of repeated characters to trigger an application crash and prevent successfu...

GE Vernova ProficySCADA 安全漏洞

GE Vernova ProficySCADA is a data acquisition and monitoring control system developed by the American company GE Vernova. Version 5.0.25920 of GE Vernova ProficySCADA contains a security vulnerability, which stems from improper handling of password input fields, potentially leading to application...

Cross-site Scripting (XSS)

Overview @saltcorn/server is a Server app for Saltcorn, open-source no-code platform Affected versions of this package are vulnerable to Cross-site Scripting XSS and code execution, via the name parameter on the /admin/edit-codepage endpoint and improper handling of backup password input to the...

PT-2025-52692

Name of the Vulnerable Software and Affected Versions Cobian Backup 11 Gravity version 11.2.0.582 Description The software contains a denial of service issue in the FTP password input field. An attacker can crash the application by providing a specially crafted 800-byte buffer in the password...

PT-2025-50352

Name of the Vulnerable Software and Affected Versions PagerDuty Runbook versions through 2025-06-12 Description PagerDuty Runbook through 2025-06-12 has an issue where stored secrets are exposed directly in the webpage Document Object Model DOM at the configuration page. While these secrets are...