EUVD-2020-23971

Malware in sbrugna...

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Design/Logic Flaw

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

Code injection

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-23037

CVE-2020-23037 affects Portable Ltd Playable v9.18. A code injection vulnerability exists in the filename parameter that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST request. The issue is rooted in the filename handling and, per linked documents, is demonstrated ...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

CVE-2020-36485

Portable Ltd Playable v9.18 contains an arbitrary file upload vulnerability in the filename parameter of the upload module, allowing arbitrary code execution via a crafted JPEG file. Root cause noted as insufficient validation in the upload filename handling; mitigation/remediation details are no...

Playable 9.18 iOS - Persistent Cross-Site Scripting

Title: Playable 9.18 iOS - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-04-15 Software Link: https://apps.apple.com/de/app/playable-the-full-hd-media-player/id502405034 CVE: N/A Document Title: =============== Playable v9.18 iOS - Multiple Web Vulnerabilities...