Progress Software OpenEdge Code Issue Vulnerability

Progress Software OpenEdge is a suite of integrated development environments IDEs from the US-based Progress Software. A security vulnerability exists in Progress Software OpenEdge version 11.7 through 11.7.18 and version 12.2 through 12.2.13. An attacker could exploit this vulnerability to...

Acritum Femitter Server Path Traversal Vulnerability

Acritum Femitter Server is an easy-to-use HTTP and FTP server application for Windows from Acritum. A path traversal vulnerability exists in Acritum Femitter Server version 1.04, which stems from the presence of a path traversal vulnerability...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome WebTransfer that originates from reuse after release...

CVE-2022-36967

In Progress WSFTP Server prior to version 8.7.3, multiple reflected cross-site scripting XSS vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScript into a WSFTP administrator's web session. This would allow the attacker to...

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99261)

A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...

Google Chrome 资源管理错误漏洞

A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...

CVE-2018-3834

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going t...

UBUNTU-CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...