1451 matches found
CVE-2025-60855
Reolink Video Doorbell WiFi DB566128M5MPW performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is...
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Summary An SMTP Command Injection CRLF Injection vulnerability in Netty's SMTP codec allows a remote attacker who can control SMTP command parameters e.g., an email recipient to forge arbitrary emails from the trusted server. This bypasses standard email authentication and can be used to...
EUVD-2025-34084
Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...
CVE-2025-58084 Mattermost Desktop App crashes when clicking on malformed external URL
Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...
Arbitrary File Write
github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...
Online Hotel Reservation System addslideexec.php file arbitrary file upload vulnerability
Online Hotel Reservation System is an online hotel reservation system. Online Hotel Reservation System has an arbitrary file upload vulnerability that stems from a lack of valid validation of uploaded files by the parameter image in the file /admin/addslideexec.php. No details of the vulnerabilit...
Tenda AC7 安全漏洞
Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the parameter enable in the file /goform/saveAutoQos that fails to correctly validate the length of the input data, and can be exploited by ...
SourceCodester Pet Grooming Management Software 安全漏洞
SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from insufficient validation of fname and lname field inputs, and could...
EUVD-2019-10234
Malware in sbrugna...
EUVD-2017-8951
Malware in sbrugna...
EUVD-2018-20607
Malware in sbrugna...
EUVD-2020-7091
Malware in sbrugna...
EUVD-2019-1320
Malware in sbrugna...
EUVD-2018-9408
Malware in sbrugna...
EUVD-2020-24189
Malware in sbrugna...
EUVD-2020-27506
Malware in sbrugna...
EUVD-2018-18948
Malware in sbrugna...
EUVD-2020-3328
Malware in sbrugna...