Malicious code in oneauth-win64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41586 Malicious code in oneauth-win64 (npm)

--- -= Per source details. Do not edit below this line.=-...

Employee And Visitor Gate Pass Logging System 1.0 SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Employee and Visitor Gate Pass Logging System - SQLi Authentication Bypass Exploit Author: Furkan Eren Tetik Vendor Homepage:...

Bludit 3-14-1 Plugin (UploadPlugin) - Remote Code Execution (Authenticated) Vulnerability

Exploit Title: Bludit 3-14-1 Plugin 'UploadPlugin' - Remote Code Execution RCE Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.bludit.com/ Version : 3-14-1 Tested on: windows 11 wampserver | Kali linux Category: WebApp Google Dork: intext:'2022...

K15376: OpenSSL 0.9.8k vulnerability CVE-2009-0789

Security Advisory Description OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service invalid memory access and application crash by placing this structure in the public key of a...

TextPattern CMS 4.8.7 Shell Upload

Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution RCE Authenticated Date: 2021/09/06 Exploit Author: Mert Daş [email protected] Software Link: https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web: https://textpattern.com/ Tested on: Server: Xampp First of...

TextPattern CMS 4.8.7 - Remote Command Execution Vulnerability

Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution RCE Authenticated Exploit Author: Mert Daş email protected Software Link: https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web: https://textpattern.com/ Tested on: Server: Xampp First of all we should use file...

Selea CarPlateServer 4.0.1.6 Remote Program Execution

Selea CarPlateServer CPS v4.0.1.6 Remote Program Execution Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: 4.0.1.6210120 4.013201105 3.100200225 3.005191206 3.005191112 Summary: Our CPS Car Plate Server software is an advanced solution that can be installed on...

Akord-Win64 Information Disclosure

The vulnerability of the Akord-Win64 information protection tool against unauthorized access is related to deficiencies in security mechanisms when working with hidden files and directories. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to...

Akord-Win64 AppInit_DLLs Code Execution

The vulnerability of the AppInitDLLs parameter in the Accord-Win64 information protection tool is related to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially crafted DLL library, by placing i...

PT-2018-2883

Name of the Vulnerable Software and Affected Versions Аккорд-Win64 affected versions not specified Description The issue is related to insufficient access control in the Аккорд-Win64 information security tool. Exploitation of this issue could allow a remote attacker to bypass an additional...

PT-2018-2881

Name of the Vulnerable Software and Affected Versions Acrunnt.exe affected versions not specified Description The issue is related to weaknesses in the system library call mechanism of the Acrunnt.exe executable file in the Accord-Win64 information protection tool. Exploitation of this issue may...

PT-2018-2882

Name of the Vulnerable Software and Affected Versions Akkord-Win64 affected versions not specified Description The issue is related to the AppInit DLLs parameter of the Akkord-Win64 information protection tool. It is caused by shortcomings in the system library call mechanism. Exploitation of thi...

PT-2018-2880

Name of the Vulnerable Software and Affected Versions Akkord-Win64 affected versions not specified Description The issue is related to shortcomings in security mechanisms when handling hidden files and directories. It may allow a local attacker to access confidential information using Windows API...

PT-2018-2879

Name of the Vulnerable Software and Affected Versions Akkord-Win64 affected versions not specified Description The issue is related to insufficient access control to files when an address is explicitly specified, allowing a local attacker to access confidential data using Windows API...

RealPlayer 18.1.5.705 - '.QCP' Crash (PoC) Exploit

Exploit for windows platform in category dos / poc RealPlayer 18.1.5.705 - '.QCP' Crash PoC Exploit Tested on: Win7 / Win10 x64 Date: October 20th 2016 Vendor homepage: http://www.real.com Software link:...

CVE-2009-0789

OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service invalid memory access and application crash by placing this structure in the public key of a certificate, as demonstrated by ...

up.time 7.5.0 - Upload and Execute

up.time 7.5.0 - Upload and Execute up.time 7.5.0 Upload And Execute File Exploit Vendor: Idera Inc. Product web page: http://www.uptimesoftware.com Affected version: 7.5.0 build 16 and 7.4.0 build 13 Summary: The next-generation of IT monitoring software. Desc: up.time suffers from arbitrary...

up.time 7.5.0 - Superadmin Privilege Escalation

up.time 7.5.0 - Superadmin Privilege Escalation ...

up.time 7.5.0 Upload And Execute File Exploit

Summary The next-generation of IT monitoring software. Description up.time suffers from arbitrary command execution. Attackers can exploit this issue using the monitor service feature and adding a command with respected arguments to given binary for execution. In combination with the CSRF,...