210 matches found
ROS-20260623-73-0016
Vulnerability in Python 3.13 related to the failure to take measures for data cleaning at the management level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0015
Vulnerability in Python 3.12 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0012
Vulnerability in Python 3.9 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0014
Vulnerability in Python 3.11 related to the lack of measures taken to clean data at the management level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0013
Vulnerability in Python 3.10 related to the failure to take measures for data cleaning at the management level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0011
The vulnerability in Python3 is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of measures for cleaning incoming data, allows a perpetrator to disclose protected information.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in operating systems like iOS, related to the lack of measures for cleaning incoming data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in operating systems like iOS stems from the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected informati...
Exploit for CVE-2025-11203
CVE-2025-11203 – LiteLLM Health Endpoint APIKEY Information D...
The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to gain access to confidential information or cause service failures.
The vulnerability of the Cisco IoT Field Network Director software interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
Cisco Identity Services Engine 安全漏洞
Cisco Identity Services Engine is an identity services engine developed by Cisco, a US-based company. This platform collects real-time information from networks, users, and devices, and develops and implements policies to manage the network. There is a security vulnerability in Cisco Identity...
The vulnerability of the imaplib module in the Python interpreter allows a hacker to execute arbitrary code.
The vulnerability of the imaplib module in the Python interpreter is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Zammad 安全漏洞
Zammad is a ticketing management software developed by the German company Zammad. Versions of Zammad prior to 7.0.1 and 6.5.4 contained security vulnerabilities. These vulnerabilities were due to improper cleaning of data: URI schemes by the HTML cleaner, which could allow the storage of maliciou...
The vulnerability of Microsoft Bing’s search engine component, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.
The vulnerability of the Bing Images component of the Microsoft Bing search engine is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of data cleaning at the management level. This allows attackers to execute arbitrary commands with root privileges.
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of data cleaning at the management level. This allows attackers to execute arbitrary commands with root privileges.
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...
TP-Link TL-MR6400 安全漏洞
The TP-Link TL-MR6400 is a wireless router produced by TP-Link Corporation. The TP-Link TL-MR6400 v5.3 version has a security vulnerability, which stems from insufficient data cleaning in the Telnet CLI. This vulnerability may lead to command injection attacks...
The vulnerability of the HTTP API component of Cisco IOS XE allows a perpetrator to execute arbitrary commands.
The vulnerability of the HTTP API component of Cisco IOS XE operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.
The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...
The vulnerability of the sub_435E04() function in Netgear JWNR2000v2 software allows a hacker to execute arbitrary commands.
The vulnerability of the sub435E04 function in Netgear JWNR2000v2 microprogrammed software lies in the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...