PT-2021-22570

Name of the Vulnerable Software and Affected Versions: Canon Oce Print Exec Workgroup version 1.3.2 Description: The issue allows for cross-site scripting XSS attacks via the lang parameter. This means an attacker could potentially inject malicious scripts into the application, affecting users wh...

CVE-2021-39368: Improper Neutralization of Input During Web Page Generation

Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter...

Canon Oce Print Exec Workgroup 跨站脚本漏洞

Canon Oce Print Exec Workgroup is a software application from Canon Japan. It is a program that displays basic printer information. A security vulnerability exists in Canon Oce Print Exec Workgroup version 1.3.2, which allows an attacker to conduct XSS attacks via the lang parameter...

CVE-2021-32602

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform ...

PT-2021-19801

Name of the Vulnerable Software and Affected Versions FortiPortal GUI versions 6.0.4 and below FortiPortal GUI versions 5.3.6 and below FortiPortal GUI versions 5.2.6 and below FortiPortal GUI versions 5.1.2 and below FortiPortal GUI versions 5.0.3 and below FortiPortal GUI versions 4.2.2 and bel...

CVE-2021-32602: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform ...

CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

Design/Logic Flaw

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

CVE-2020-23171

The CVE-2020-23171 entry concerns Nim-lang: all versions are affected by an unauthenticated write-to-arbitrary-directories vulnerability via a crafted zip file whose file name contains dot-slash characters. The connected documents confirm Nim-lang as the affected software and describe the vulnera...

CVE-2020-23171

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

PT-2021-10849

Name of the Vulnerable Software and Affected Versions Nim-lang versions all Description A vulnerability allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file. Recommendations For Nim-lang...

CVE-2020-23171: Externally Controlled Reference to a Resource in Another Sphere

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file...

PT-2021-17961

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-755AP version 1.11B03 TRENDnet TEW-755AP2KAC version 1.11B03 TRENDnet TEW-821DAP2KAC version 1.11B03 TRENDnet TEW-825DAP version 1.11B03 Description: A Null Pointer Dereference issue exists, which could allow a remote malicious...

The vulnerability of the setLanguage() function in the PHPMailer library allows a hacker to execute arbitrary code.

The vulnerability of the setLanguage function in the PHPMailer library is related to errors in processing the $langpath parameter. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2021-3321 · Phpmailer · Phpmailer

Name of the Vulnerable Software and Affected Versions: PHPMailer versions prior to 6.5.0 Description: The issue is related to errors in handling the lang path parameter in the setLanguage function of the PHPMailer library. This can allow a remote attacker to execute arbitrary code if the lang pat...

Trixbox 2.8.0.4 - (lang) Path Traversal Exploit

Exploit Title: Trixbox 2.8.0.4 - 'lang' Path Traversal Exploit Author: Ron Jost Hacker5preme Credits to: https://secur1tyadvisory.wordpress.com/2018/02/13/trixbox-multiple-path-traversal-vulnerabilities-cve-2017-14537/ Credits to: Sachin Wagh Vendor Homepage:...

Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)

Exploit Title: Trixbox 2.8.0.4 - 'lang' Remote Code Execution Unauthenticated Date: 27.05.2021 Exploit Author: Ron Jost Hacker5preme Credits to: https://secur1tyadvisory.wordpress.com/2018/02/11/trixbox-os-command-injection-vulnerability-cve-2017-14535/ Credits to: Sachin Wagh Vendor Homepage:...

app-context-connie (>=0.0.1, <=1.1.0), app-context-connie-firebase (>=0.0.1, <=0.0.3) +1 more potentially affected by CVE-2020-7706 via connie-lang (>=0.0.1, <=0.1.0)

connie-lang NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.2.1 Source cves: CVE-2020-7706 Source advisory: OSV:GHSA-8VV3-JXM8-F4VF...