138 matches found
CVE-2023-24286
A crafted save file can cause a buffer overrun in the Mosaic puzzle...
CVE-2023-24285
A crafted save file can cause a buffer overrun in the Netslide puzzle...
CVE-2023-24291
A crafted save file can cause a buffer overrun in Simon Tatham's Portable Puzzle Collection...
EUVD-2023-60636
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service DoS via a crafted save file...
CVE-2023-24287
A crafted save file can cause a buffer overrun in the Undead puzzle...
CVE-2023-24288
A crafted save file can cause a buffer overrun in Simon Tatham's Portable Puzzle Collection...
CVE-2023-24284
A crafted save file can cause a buffer overrun in the Guess puzzle...
CVE-2023-24283
A crafted save file can cause a buffer overrun in the Guess puzzle...
CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
openSUSE 16: freeciv / freeciv-gtk3 / freeciv-gtk4 / freeciv-lang / freeciv-qt / etc (openSUSE-SU-2026:21800-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21800-1 advisory. Changes in freeciv: - freeciv 3.2.6: Fix Heap Buffer Overflow in worklistload via Crafted Save File boo1278695 Fix Out-of-Bounds Read in activities.orde...
Security update for freeciv (important)
openSUSE security update: security update for freeciv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21800-1 Rating: important References: bsc1278695 bsc1278696 Affected Products: openSUSE Leap 16.0...
PT-2026-60868
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description Improper input validation in the APIRequest component allows an attacker to write arbitrary files to unintended locations. This occurs when the Save to File feature is enabled, as...
CVE-2026-55633 DataEase H2 RCE via Zip Protocol & File Dropper Fix bypass
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file dropper fix allows an authenticated attacker to upload a zip archive disguised with a .ttf extension through FontManage.saveFile and then exploit it through the zip protocol...
CVE-2026-56137
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...
CVE-2026-56137
RPG MAKER MV and MZ (Gotcha Gotcha Games Inc.) have an OS command injection vulnerability. When a user loads a specially crafted save-file, arbitrary OS commands may be executed. Affected components and root cause are stated as OS command injection, with high impact (CVE-2026-56137). The supplied...
EUVD-2026-40256
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...
CVE-2026-46392
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the saveFile endpoint validates upload extensions case-insensitively and writes the filename to disk verbatim, but the .htaccess rule that forces Content-Disposition: attachment on HTML...
Devs Palace ERP Online 跨站脚本漏洞
Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from operations on unknown code located in...
Devs Palace ERP Online 跨站脚本漏洞
Devs Palace ERP Online is a cloud-based enterprise resource planning and business management system developed by Devs Palace. Versions of Devs Palace ERP Online 4.0.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from an unknown function in the...
