CVE-2024-33789: Improper Neutralization of Special Elements used in a Command

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...

CVE-2024-33789

The Linksys E5600 router (v1.1.0.26) is vulnerable to a command injection flaw within the microprogramming software. The root cause is the runtime.pingTest() function's failure to properly neutralize special characters when processing the ipurl parameter at the /API/info form endpoint. A remote a...

Haschek Solutions Pictshare 跨站脚本漏洞

Haschek Solutions Pictshare is an open source image, Mp4, Pastebin hosting service from Haschek Solutions, Austria. A cross-site scripting vulnerability exists in Haschek Solutions Pictshare that stems from the exit function in the product api/info.php file not effectively filtering input data. T...