Protégez vos données, renforcez Votre Cybersécurité

CVE-2025-9809 - HIGH
01/09/2025

Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-57799 - HIGH
01/09/2025

StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault-system, an attacker can modify certain system parameters, construct malicious commands, execute command injection attacks against the system, and ultimately gain server privileges. Users of all versions of the StreamVault system to date who have not modified their backgro...

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-9783 - HIGH
01/09/2025

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-9782 - HIGH
01/09/2025

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/formOneKeyAccessButton. Performing manipulation of the argument submit-url results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-9781 - HIGH
01/09/2025

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-9780 - HIGH
01/09/2025

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQoS. This manipulation of the argument mac causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-0610 - HIGH
01/09/2025

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery.This issue affects QR Menü: from s1.05.06 before v1.05.12.

csrfOWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2025-2412 - HIGH
01/09/2025

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass.This issue affects QR Menu: from s1.05.07 before v1.05.12.

OWSAP: A07

>> Plus d'informations avec CVE Find

CVE-2025-9779 - HIGH
01/09/2025

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-54857 - CRITICAL
01/09/2025

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges.

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-6507 - CRITICAL
01/09/2025

A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially leading to arbitrary code execution and reading of system files. This issue affects the latest master branch version 3.47.0.99999. The vulnerability arises from the ability to bypass regular expression filters intended to prevent malicious parameter injection in JDBC connections...

OWSAP: A08

>> Plus d'informations avec CVE Find

CVE-2025-9748 - HIGH
31/08/2025

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.

overflow

>> Plus d'informations avec CVE Find

CVE-2024-32832 - CRITICAL
31/08/2025

Missing Authorization vulnerability in Hamid Alinia Login with phone number.This issue affects Login with phone number: from n/a through 1.6.93.

authorisationproblemOWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2025-31100 - CRITICAL
31/08/2025

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 (02-07-2025).

fileinclusionOWSAP: A04

>> Plus d'informations avec CVE Find

CVE-2005-10004 - HIGH
30/08/2025

Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially com...

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2009-20008 - HIGH
30/08/2025

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted webpage containing a long URL, ...

CVE-2009-20009 - CRITICAL
30/08/2025

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. E...

CVE-2009-20010 - CRITICAL
30/08/2025

Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the underlying shell without adequate escaping. This allows attackers to inject arbitrary shell commands and execute them on the server. The flaw i...

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2009-20011 - CRITICAL
30/08/2025

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Additionally, the exploit can optionally escalate privileges by abusing insecure PAT...

fileinclusionoscommandinjectionOWSAP: A04OWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2010-10016 - CRITICAL
30/08/2025

BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded in the playlist, allowing overwrite of Structured Exception Handler (SEH) records. The vulnerability i...

overflow

>> Plus d'informations avec CVE Find