CVE Vulnerability Catalog

Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft malicious input in the Registration Name and Registration Key fields to overwrite the SEH chain and execute shellcode for reverse shell access.

A buffer overflow vulnerability in the registration dialog of SocuSoft iPod Photo Slideshow 8.05 allows local attackers to overwrite the structured exception handler and execute arbitrary code by crafting malicious input in the Registration Name and Registration Key fields.

Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers can send requests to nocache.php with encoded backslash sequences to traverse directories and access sensitive files including system configuration and password files.

A stack-based buffer overflow in the registration name field of SocuSoft DVD Photo Slideshow Professional 8.07 allows local attackers to exploit structured exception handling by pasting a crafted text file into the Registration Name field, leading to arbitrary code execution.

MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter. Attackers can submit crafted POST requests to the userSignup.php endpoint with SQL payloads in the email field to extract sensitive database information from the backend MySQL database.

mooSocial Store Plugin 2.6 contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the product parameter in URL rewrite functionality. Attackers can inject SQL code using boolean-based blind, time-based blind, or stacked query techniques in the product URI parameter to extract sensitive database information.

Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field. Attackers can paste a buffer of repeated characters into the password input field to trigger an application crash when attempting to authenticate.

A buffer overflow vulnerability in CuteFTP 5.0 XP allows local attackers to inject a malicious payload into the Site Manager label field, which overwrites the return address and executes shellcode when a shortcut is created and launched.

PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. Attackers can use sequences like ../../../../../../../../../../../../etc/passwd to access sensitive system files outside the intended directory.

Twitter-Clone 1 contains an SQL injection vulnerability in the 'name' parameter, allowing unauthenticated attackers to execute arbitrary SQL queries via the search.php endpoint, enabling extraction of credentials and other database information.

Twitter-Clone 1 contains an SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information including usernames, passwords, and database credentials.

AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and jump instructions that overwrite the SEH handler pointer to achieve code execution when the file contents are pasted into the application.

Splinterware System Scheduler Pro 5.12 has an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable files. Attackers can rename WService.exe and replace it with a malicious executable that runs with LocalSystem privileges.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formRadius function of the /goform/formRadius file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formAccept function of the /goform/formAccept file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formConnectionSetting function of the /goform/formConnectionSetting file via manipulation of the max_Conn/timeOut arguments. The attack can be initiated remotely, and the exploit has been publicly disclosed.

FoundDream miniclawd up to commit 2d65665046e2222eeea76cafc8570ed546a8c125 contains a command injection vulnerability in the SkillsLoader component. Manipulating the requires.bins argument in /src/application/skills-loader.ts allows remote code execution. The exploit is publicly available. The product does not use versioning, and the project has not responded to the issue report.

Kenik Camera management Panel is vulnerable to Path Traversal. An unauthenticated attacker can send a GET request with an arbitrary file path and read corresponding files on the server.

FoundDream miniclawd up to commit 2d65665046e2222eeea76cafc8570ed546a8c125 contains an OS command injection vulnerability in the ExecTool.execute function in /src/tools/exec.ts. The attack can be launched remotely. The exploit is publicly available. The product does not use versioning, and the project has not responded to the issue.

SQL Injection vulnerability in /user/search.php of SourceCodester Simple POS and Inventory System 1.0. Manipulation of Name argument leads to SQL injection. Remote attack, exploit public.