EUVD-2020-8054

Malware in sbrugna...

CVE-2020-16087

An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file...

drc-cmis (>=1.3.0, <=1.6.0) potentially affected by unknown CVE via vng-api-common (2.0.5)

vng-api-common PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on vng-api-common and may be impacted: - drc-cmis =1.3.0, =1.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-C4CM-R9FH-JGJ9...

drc-cmis (>=1.3.0, <=1.6.0) potentially affected by unknown CVE via vng-api-common (2.0.5)

vng-api-common PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on vng-api-common and may be impacted: - drc-cmis =1.3.0, =1.6.0 Source cves: unknown CVE Source advisory: GHSA-C4CM-R9FH-JGJ9...

PT-2024-40234 · Unknown +1 · Vng-Api-Common +1

Name of the Vulnerable Software and Affected Versions: vng-api-common versions prior to 1.12.2 Description: This issue is related to a privilege escalation vulnerability, although its impact is negligible and entirely theoretical. It involves the verification of client-supplied JSON Web Tokens JW...

October CMS upload process vulnerable to RCE via Race Condition

Impact This advisory affects plugins that expose the October\Rain\Database\Attach\File::fromData as a public interface. This vulnerability does not affect vanilla installations of October CMS since this method is not exposed or used by the system internally or externally. When the developer allow...

GHSA-8V7H-CPC2-R8JP October CMS upload process vulnerable to RCE via Race Condition

Impact This advisory affects plugins that expose the October\Rain\Database\Attach\File::fromData as a public interface. This vulnerability does not affect vanilla installations of October CMS since this method is not exposed or used by the system internally or externally. When the developer allow...

CVE-2020-16087

An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file...

CVE-2020-16087

An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file...

CVE-2020-16087

Summary: CVE-2020-16087 affects Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can cause arbitrary command execution on a remote Windows machine by the user opening a crafted file sent to them. The vulnerability is described as a locally exploitable issue with the potential for high impact on...

PT-2020-14743

Name of the Vulnerable Software and Affected Versions VNG Zalo Desktop version 19.8.1.0 Description An issue was discovered in Zalo.exe that allows an attacker to run arbitrary commands on a remote Windows machine running the Zalo client. This can be achieved by sending the user of the device a...

CVE-2020-16087: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafted file...