PT-2024-22933 · Lepton · Lepton

Name of the Vulnerable Software and Affected Versions: lepton version 7.1.0 Description: The issue allows remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the "save.php" and "config.php" components. This enables attackers to potentially gain control ove...

PT-2023-31984 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZZCMS version 2.1.7 Description: A critical issue was found in the restore function of the /admin/save.php file, part of the Database Backup File Handler component. This issue leads to permission problems and can be exploited remotely. The...

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflows. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflows. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Buffer Overflow

sgt-puzzles is vulnerable to Buffer Overflows. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...

Mozilla Firefox Focus for Android Firefox ESR Thunderbird Information Disclosure

The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to insufficient protection of sensitive data during the processing of save file requests via the “Save Link As” dialog box. Exploiting these vulnerabilities can allow an...

CVE-2022-39811

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modify the system configuration, bypassin...

PT-2023-19513

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned Description A crafted save file can cause a buffer overrun in the Mosaic puzzle. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-19510

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A crafted save file can cause a buffer overrun in the Guess puzzle. There is no information available about the estimated number of potentially affected...

PT-2023-19514

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A crafted save file can cause a buffer overrun in the Undead puzzle. There is no information available about the estimated number of potentially affected...

Covid-19 Travel Pass Management System 跨站脚本漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. The Covid-19 Travel Pass Management System v1.0 version contains a cross-site scripting vulnerability that originates in /ctpms/classes/Users.php?f=save and lacks data validation filters for user-supplied data and...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by the window.showSaveFilePicker function that parses and returns environment variable values to the user when passing environment variables, which can be exploited by an attacker to...

Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug

The latest installment of the Dark Souls gaming franchise, Elden Ring, contains a security vulnerability that allows bad actors to throw players on PCs into an endless loop of losing their characters’ lives, rendering it essentially unplayable. Malwarebytes Labs researcher Christopher Boyd said...

Unspecified vulnerability in ZZCMS licence_save.php file

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in the user/licencesave.php file in ZZCMS 8.3 and earlier versions. An attacker can exploit the vulnerability to execute code...

Buffer overflow

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...