CVE-2024-51364
https://notcve.org/view.php?id=CVE-2024-51364
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file. • http://modbusmechanic.com https://github.com/Gelcon/PoC-ModbusMechanic-3.0-Insecure-Deserialization-and-RCE •
CVE-2024-51365
https://notcve.org/view.php?id=CVE-2024-51365
An arbitrary file upload vulnerability in the importSettings method of VisiCut v2.1 allows attackers to execute arbitrary code via uploading a crafted Zip file. • http://visicut.com https://download.visicut.org https://github.com/Gelcon/PoC-of-VisiCut2_1-Stack-Overflow-Vul •
CVE-2024-51366
https://notcve.org/view.php?id=CVE-2024-51366
An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file. • http://omegat.com https://github.com/Gelcon/PoCofOmegaTV6_0_1 https://omegat.org •
CVE-2024-51367
https://notcve.org/view.php?id=CVE-2024-51367
An arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard v2.0.0.2 allows attackers to execute arbitrary code via uploading a crafted .xml file. • http://blackboard.com https://github.com/Gelcon/PoCofBlackBoard2.0.0.2 •
CVE-2024-11506 – IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-11506
IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. ... An attacker can leverage this vulnerability to execute code in the context of the current process. ... This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. ... An attacker can leverage this vulnerability to execute code in the context of the current process. • https://www.zerodayinitiative.com/advisories/ZDI-24-1594 • CWE-125: Out-of-bounds Read •