Ivanti Endpoint Manager SQL Injection Vulnerability (CNVD-2025-15488)

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

EulerOS 2.0 SP9 : python-setuptools (EulerOS-SA-2024-2837)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download...

PT-2024-8476

The vulnerable software is 7-Zip, a widely used file compression utility. The issue arises from an integer underflow in the Zstandard decompression implementation, allowing remote attackers to execute arbitrary code on affected installations of 7-Zip by crafting specially designed archive files. ...

PT-2024-30179 · Langflow · Langflow

Name of the Vulnerable Software and Affected Versions: langflow version 1.0.12 Description: A remote code execution RCE vulnerability was discovered in langflow via the PythonCodeTool component. This issue allows a malicious JSON file to be imported to run arbitrary code on the target system by...

Important: python3.11-setuptools

Issue Overview: A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptibl...

CVE-2024-51243

The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...

PT-2024-28877 · Freecoap · Freecoap

Name of the Vulnerable Software and Affected Versions: FreeCoAP affected versions not specified Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted packet, resulting in a stack buffer overflow in the coap msg.c file. Recommendations:...

CVE-2024-43587

CVE-2024-43587 is a remote code execution vulnerability in Microsoft Edge (Chromium-based). Public sources in the connected data identify Edge as affected and list multiple vulnerabilities, including CVE-2024-43587, as part of a bundle affecting Edge versions prior to update 130.0.2849.46. The Op...

7z slip lead to remote code execution

This report is not public...

USN-7065-1: Firefox vulnerability

Damien Schaeffer discovered that Firefox did not properly manage memory in the content process when handling Animation timelines, leading to a use after free vulnerability. An attacker could possibly use this issue to achieve remote code execution...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2024-42942)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A remote code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...

DeepSpeed Remote Code Execution Vulnerability

DeepSpeed Remote Code Execution Vulnerability...

CVE-2024-43497

DeepSpeed Remote Code Execution Vulnerability...

MTN Group: CVE-2017-9822 DotNetNuke Cookie Deserialization Remote Code Execution (RCE) on lonidoor.mtn.ci

The DotNetNuke DNN versions between 5.0.0 and 9.3.0 were affected by a deserialization vulnerability that could lead to remote code execution. The vulnerability was caused by the way DNN handled the DNNPersonalization cookie, which was used to store anonymous users' personalization options. The...

PT-2024-38020 · Localai · Localai

Name of the Vulnerable Software and Affected Versions: mudler/localai version 2.17.1 Description: The localai backend is susceptible to remote code execution. This occurs because the backend accepts inputs from sources beyond the configuration file, enabling an attacker to upload and execute a...

MGASA-2024-0313 Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...

PDF-XChange Editor XPS file parsing out-of-bounds read remote code execution vulnerability (CNVD-2024-40774)

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds read remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

CVE-2024-45195

Direct Request ‘Forced Browsing’ vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue. Recent assessments: remmons-r7 at September 25, 2024 3:32pm UTC reported: Apache OFBiz is an open-source...

CVE-2024-42788

A Stored Cross Site Scripting XSS vulnerability was found in "/music/ajax.php?action=savemusic" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields...

PT-2025-28263 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...