The vulnerability of the downFiles function in the microprogramming software for wireless access point controllers Ruijie WS6008 and WS6108 allows a intruder to execute arbitrary commands.

The vulnerability of the downFiles function in the microprogramming software for wireless access point controllers Ruijie WS6008 and WS6108 is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a malicious actor to execute arbitrary...

The vulnerability of SSH-dissection analyzers in Wireshark allows a hacker to cause a service failure.

The vulnerability of SSH-dissection analyzers in Wireshark relates to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially created packets...

The vulnerability of the Python programming language’s pip module, related to the lack of data cleaning at the control level, allows attackers to alter the repository configuration.

The vulnerability of the Python programming language’s pip module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to modify the repository configuration...

WordPress Plugin Bitly Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

WordPress Plugin Interact: Embed A Quiz On Your Site Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin WP MapIt Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress Plugin ImageMapper Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

The vulnerability of the network management system for monitoring and managing industrial networks in SINEC NMS, related to improper data cleaning in the SNMP configuration, allows a attacker to execute XSS attacks.

The vulnerability of the network management system for monitoring and managing industrial networks in SINEC NMS is related to improper data cleaning in the SNMP configuration. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the software for creating wireless routers based on Debian RaspAP, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.

The vulnerability of the software for creating wireless routers based on Debian RaspAP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted POST request with t...

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, allows a intruder to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, is related to insufficient cleaning of input data during the processing of dtb format files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software arises from the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software arises from the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the REMOTEPORT parameter...

PT-2023-5415 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to a lack of proper data cleaning at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the HTTP ST parameter. Th...

PT-2023-5416 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to the lack of data cleaning measures at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the REMOTE PORT...

The vulnerability of the console-based graphic editor ImageMagick arises from the lack of data cleaning at the control level when processing parameters like video:vsync or video:pixel-format. This allows an attacker to execute arbitrary commands.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of measures taken at the control level when processing parameters like video:vsync or video:pixel-format. Exploiting this vulnerability allows an attacker to execute arbitrary commands using specially created...

The vulnerability of the _httpRpmPlcDeviceAdd function in the microprogramming software of the TP-Link TL-WPA4530 V2 allows a hacker to execute arbitrary code.

The vulnerability of the httpRpmPlcDeviceAdd function in the microprogrammed software of the TP-Link TL-WPA4530 V2 device is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability in the virtual training environment Moodle, related to insufficient data cleaning, allows a malicious user to execute arbitrary SQL queries in the database.

The vulnerability in the virtual training environment Moodle is related to insufficient cleaning of data provided by users in the external Wiki method for listing pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to insufficient cleaning of user data during search operations on blogs. Exploiting this vulnerability can allow a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Snowflake Golang driver for working with the cloud-based data processing and storage platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Snowflake Golang driver for working with cloud-based data processing and storage platforms is related to the lack of measures to clean incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the network and application monitoring tool used by VMware Aria Operations for Networks (previously known as vRealize Network Insight) lies in the lack of measures for data cleaning at the management level. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary commands.

The vulnerability of the network and application monitoring tool, VMware Aria Operations for Networks previously vRealize Network Insight, is related to the lack of measures for data cleaning at the management level. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...