Unknown

This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null bytes. This allows attackers to access http://host/%00 and crash the server.

Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An at

Command Injection

Deserialization of Untrusted Data

Open Redirect

Denial of Service (DoS)

Malicious Package

Denial of Service (DoS)

Regular Expression Denial of Service (ReDoS)