Microsoft Copilot Web Data Cleansing Disclosure

The vulnerability of the Microsoft Copilot Web-based artificial intelligence conversational assistant is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Vim ZIP Plugin Command Execution

The vulnerability in the built-in ZIP-plugin of the Vim text editor’s runtime/autoload/zip.vim module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

shell-quote npm Code Execution

The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Outlook Copilot Arbitrary Command Execution

The vulnerability of the intelligent virtual assistant for Microsoft Outlook Copilot is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Azure Cloud Shell Spoofing

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

Cisco Identity Services Engine Code Execution

The vulnerability of the Cisco Identity Services Engine ISE web interface and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of measures taken at the management level for data cleansing. Exploiting this vulnerability could all...

Cisco Identity Services Engine Code Execution

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitHub Copilot Chat Extension Disclosure

The vulnerability of the GitHub Copilot Chat Extension of the source code editor Microsoft Visual Studio Code is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

IBM Sterling B2B Integrator File Gateway DoS

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of data cleansing measures at the management level. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MCP Server Component Code Execution

The vulnerability of the childprocess.exec component in the MCP Server library is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PowerShell Code Execution

The vulnerability of PowerShell command interpreters on Windows operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft Visual Studio Code CoPilot Chat Extension Code Execution

The vulnerability of the Microsoft Visual Studio Code CoPilot Chat Extension is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linksys E3000 Router Arbitrary Command Execution

The vulnerability of the diagpingstart function in Linksys E3000 router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

BIG-IP iControl REST Handler Command Execution

The vulnerability of the iControl REST Handler component of the BIG-IP access control and remote authentication solution is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

ROS-20250624-07

A vulnerability in the Mercurial version control software tool is related to insufficient data cleansing, provided by the user. Exploitation of the vulnerability could allow an attacker acting remotely to perform cross-site scripting XSS attacks. remotely to perform cross-site scripting XSS attac...

Self-Service Portal Data Compromise

The vulnerability of the cloud-based Self-Service Portal service, which is designed to protect applications from unauthorized users and Cisco Duo devices, stems from the lack of data cleansing measures at the management level. Exploiting this vulnerability could allow a malicious actor to...

GitLab XSS

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to insufficient cleaning of data provided by users in the Asciidoctor render. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cisco Application Policy Infrastructure Controller Privilege Escalation Command Injection

The vulnerability of the Command Line Interface CLI of the Cisco Application Policy Infrastructure Controller management tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...