CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Wing FTP Server Remote Code Execution Vulnerability via Null Byte Injection Security Advisory (CVE-2025-47812)
[Affected Scope] User and admin web interfaces of Wing FTP Server before version 7.4.4
[Impact] Unauthenticated attackers (including anonymous FTP accounts) can inject arbitrary Lua code into session files, leading to remote code execution with root or SYSTEM privileges
[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and restrict external access to the web administration interface
Microsoft DirectX DirectShow QuickTime Parser Remote Code Execution Vulnerability (CVE-2009-1537, KEV Listed)
[Affected Scope] DirectShow (quartz.dll) in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2/SP3, and Windows Server 2003 SP2
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a specially crafted QuickTime media file
[Mitigation] Apply the official Microsoft security updates (MS09-028) or disable the QuickTime Movie Parser Filter via registry modification (Kill-bit)