CVE-2024-8902: Exposure of Sensitive Information to an Unauthorized Actor

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the rendercolumn function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level...

The vulnerability of the web printing function in the control systems for printing in PaperCut MF and PaperCut NG allows a violator to trigger a service failure.

The vulnerability of the web printing function in the control tools for printing in PaperCut MF and PaperCut NG is related to the failure to implement measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker to cause servic...

CVE-2024-7840

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...

CVE-2024-7840

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...

Progress Software Telerik Reporting 命令注入漏洞

Progress Software Telerik Reporting is a .NET/.NET Framework embedded reporting tool from Progress Software, Inc. A command injection vulnerability exists in versions prior to Progress Software Telerik Reporting 2024 Q3 2024.3.924 that stems from improper neutralization of hyperlinked elements...

CVE-2024-7840: Improper Neutralization of Special Elements used in a Command

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...

PT-2024-38619 · Progress · Telerik Reporting

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924 Description: A command injection attack is possible through improper neutralization of hyperlink elements. This issue arises due to the improper handling of hyperlink element...

The vulnerability of the command-line interface (CLI) of the software-defined security solutions FortiDDoS and FortiDDoS-F allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of software-defined security solutions like FortiDDoS and FortiDDoS-F lies in the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute...

CVE-2024-43601: Improper Neutralization of Special Elements used in a Command

Visual Studio Code for Linux Remote Code Execution Vulnerability...

CVE-2024-43591: Improper Neutralization of Special Elements used in a Command

Azure Command Line Integration CLI Elevation of Privilege Vulnerability...

Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page

Summary Event log data is not properly sanitized leading to stored Cross-Site Scripting XSS vulnerability. Details - file: https://github.com/saltcorn/saltcorn/blob/v1.0.0-beta.13/packages/server/routes/eventlog.jsL445 js router.get "/:id", isAdmin, errorcatcherasync req, res = const id =...

GHSA-PF56-H9QF-RXQ4 Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page

Summary Event log data is not properly sanitized leading to stored Cross-Site Scripting XSS vulnerability. Details - file: https://github.com/saltcorn/saltcorn/blob/v1.0.0-beta.13/packages/server/routes/eventlog.jsL445 js router.get "/:id", isAdmin, errorcatcherasync req, res = const id =...

PT-2024-25102 · Qualcomm · Snapdragon +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns an information disclosure problem that occurs when parsing multiple MBSSID IEs from a beacon. This happens due to improper handling o...

PT-2024-9590

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description The issue is related to a use-after-free vulnerability in the GStreamer multimedia framework. This vulnerability is associated with the processing of CodecPrivate elements in Matroska streams...

CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-45454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2024-45454

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates:...

CVE-2024-47343

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.4...

CVE-2024-47343 WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through = 1.2.4...

CVE-2024-47343 WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.2.4...