PT-2020-8125

Name of the Vulnerable Software and Affected Versions: Crafter Studio version 3.0.1 Crafter Studio versions prior to 3.0.1 Description: An IDOR vulnerability exists in Crafter Studio, allowing unauthenticated attackers to view and modify administrative data. Recommendations: For Crafter Studio...

PT-2020-13891

Name of the Vulnerable Software and Affected Versions Gitea versions 1.1.0 through 1.12.5 Description The git hook feature in Gitea might allow for authenticated remote code execution in customer environments where the documentation was not understood. The vendor has indicated this is not a...

PT-2020-8623 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue is a buffer overflow via the 0x26 command of the NTPT3 protocol. This protocol is used in Ingenico Telium 2 POS terminals. The buffer...

Input validation

All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution RCE. Rockwell Automation recommends applying patch...

PT-2025-26461 · Edimax · Edimax Ew-7438Rpn Mini

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn Mini firmware versions 1.13 and prior Description: A remote authenticated attacker can exploit an OS command injection issue via the syscmd.asp form handler, specifically through the "sysCmd" parameter in the...

PT-2020-1764

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block SMB version 3.1.1 Microsoft Windows 10 versions 1903 through 1909 Microsoft Windows Server affected versions not specified Description A remote code execution issue exists in the way the Microsoft Server Message...

PT-2020-18906 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted TIFF file can cause an out-of-bounds write in the igcore19d.dll TIFF tifread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

PT-2019-13809 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is related to multiple heap-based buffer overflows in the CmtkLoader::load function, located in mtk.cpp. Recommendations: For AdPlug version 2.3.1, consider avoiding the use of the CmtkLoader::load...

PT-2018-14208

Name of the Vulnerable Software and Affected Versions ZZIPlib version 0.13.69 Description The issue allows attackers to overwrite arbitrary files via a .. dot dot in a zip file. This is due to the unzzip cat function in the bins/unzzipcat-mem.c file. Recommendations For ZZIPlib version 0.13.69,...

Automattic: Arbitrary File Download as Shopmanager

Due to a flaw in the way WooCommerce handles downloadable products, a shop manager can download arbitrary files on the server. The video shows the exploit and how simple it is: https://www.youtube.com/watch?v=bkrHpqht5SM The function responsible for validating the download file input is the...

PT-2018-10613 · Lrzip +1 · Long Range Zip +1

Name of the Vulnerable Software and Affected Versions: Long Range Zip aka lrzip version 0.631 Description: The issue is related to a use-after-free in the read stream function in stream.c, caused by the lack of certain size validation in the decompress file function in lrzip.c. Recommendations: F...

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)

Drupal 7.58 - Drupalgeddon3 Authenticated Remote Code Execution PoC This is a sample of exploit for Drupal 7 new vulnerability SA-CORE-2018-004 / CVE-2018-7602. You must be authenticated and with the power of deleting a node. Some other forms may be vulnerable : at least, all of forms that is in...

PT-2016-4722 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco FirePOWER Management Center versions 5.3 through 6.0.0.1 Description: The issue allows remote attackers to obtain potentially sensitive software-version information by reading help files. Recommendations: For Cisco FirePOWER Management...

PT-2010-3291 · Pidgin +1 · Pidgin +1

Name of the Vulnerable Software and Affected Versions: Pidgin versions prior to 2.7.0 Description: The issue allows remote authenticated users to cause a denial of service, resulting in a NULL pointer dereference and application crash. This is achieved by sending a custom emoticon in a malformed...

PT-2010-1852 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 8 Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2 Description: A remote code execution issue exists due to improper input validation in the URL...

Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"

Overview modimap and modimagemap modules of the Apache HTTP Server are vulnerable to cross-site scripting. The Apache HTTP Server is open source web server software. The Apache HTTP Server modules modimap and modimagemap provide server-side imagemap processing capability. The Apache HTTP Server...

32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities

Title: 32919 - Computer Associates Message Queuing CAM/CAFT multiple vulnerabilities CA Vulnerability ID: CAID 32919 Disclosure Date: 2005-08-19 Discovered By: CA internal audit Impact: Remote attackers can execute arbitrary code, or cause a denial of service condition. Summary: During a recent...

HP-UX PHNE_27796 : HP-UX DNS and Resolver Libraries, Remote Execution of Arbitrary Code, Denial of Service (DoS) (HPSBUX00209 SSRT2316 rev.17)

s700800 11.11 libnssdns DNS backend patch : Potential buffer overflows in DNS resolver libraries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE27796. The text itself is copyright C Hewlett-Packard...

Important: Red Hat Security Advisory: mailman security update

Updated mailman packages to correct a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw in the truepath function o...

[XSS] PHP-Nuke 7.4 Newsletter Injection Bug

CODEBUG Labs Advisory 5 Title: Newsletter Injection Bug Author: Pierquinto 'Mantra' Manco Product: PHP-Nuke 7.4 Type: XSS Web: http://www.mantralab.org Newsletter Injection Bug - Description PHP-Nuke is a very bugged web CMS, version 7.4 has critical XSS bug that permit to an attacker to post...