R7-Officer document editor Code Execution

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

CVE-2026-10632 Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite ZCS allows an attacker to inject JavaScript through the packages parameter of the /h/rest document editor. The editor inserts package names into script attributes without HTML encoding. When...

CVE-2026-10632

A reflected cross-site scripting (XSS) vulnerability exists in the Classic Web Client of Zimbra Collaboration Suite (ZCS) . The root cause is the lack of HTML encoding when the document editor inserts package names into script attributes via the /h/rest endpoint's packages parameter. When chained...

CVE-2026-10632 Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite ZCS allows an attacker to inject JavaScript through the packages parameter of the /h/rest document editor. The editor inserts package names into script attributes without HTML encoding. When...

Zimbra Collaboration Suite cross-site scripting vulnerability

Versions of Zimbra Collaboration Suite prior to 10.1.17 contain a cross-site scripting vulnerability. This flaw arises because the /h/rest document editor in Classic Web Client inserts script attributes without properly encoding package names within the packages parameter, resulting in reflected...

CVE-2026-18390

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-12613

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

CVE-2026-12613 Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

EUVD-2026-97430

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This issue affects UYAP Document Editor: before 5.4.20...

CVE-2026-12613 Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

CVE-2026-12613

The Ministry of Justice General Directorate of Information Technology UYAP Document Editor is affected by a deserialization of untrusted data vulnerability (CWE-502). This flaw allows for Object Injection , which can lead to significant impact on the system. The vulnerability specifically impacts...

CVE-2026-18390 Command Injection in Ministry of Justice's UYAP Document Editor

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-18390

The UYAP Document Editor (Ministry of Justice General Directorate of Information Technology) is vulnerable to an OS command injection flaw in versions before 5.4.20 . The vulnerability stems from the improper neutralization of special elements used in an OS command, potentially allowing an attack...

EUVD-2026-97437

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows OS Command Injection. This issue affects UYAP Document Editor: before 5.4.20...

CVE-2026-18390 Command Injection in Ministry of Justice's UYAP Document Editor

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

CVE-2026-12613: Deserialization of Untrusted Data

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document Editor on MacOS allows Object Injection. This issue...

PT-2026-110600

Name of the Vulnerable Software and Affected Versions UYAP Document Editor versions prior to 5.4.21 Description Improper neutralization of special elements used in an OS command leads to an OS command injection flaw in the Ministry of Justice General Directorate of Information Technology UYAP...

PT-2026-110599

Name of the Vulnerable Software and Affected Versions UYAP Document Editor versions prior to 5.4.21 Description Deserialization of untrusted data in the Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This occurs when the application...

CVE-2026-18390: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

Ministry of Justice General Directorate of Information Technology UYAP Document Editor Serialization Injection Vulnerability

The Ministry of Justice’s General Directorate of Information Technology has vulnerabilities related to deserialization injection in versions prior to UYAP Document Editor 5.4.20. These vulnerabilities stem from improper handling of deserialized untrusted data, which may lead to object injection...