Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security, the product line of the French company Stormshield for enhanced workstation and server security, has a remote code execution vulnerability in versions prior to 2.1.2, which stems from the process of constructing code segments from externally entered data. network...

Thymeleaf-Spring5 代码注入漏洞

Thymeleaf-Spring5 is an open source, modern, server-side Java template engine for web and standalone environments from the Thymeleaf team. A security vulnerability exists in Thymeleaf-Spring5, which arises from a networked system or product that does not properly filter specific elements of...

PT-2022-4661 · Otrs +1 · Otrs +1

Name of the Vulnerable Software and Affected Versions: OTRS affected versions not specified Description: The issue allows an attacker logged in as an admin user to manipulate the customer URL field, storing JavaScript code that can be executed later by any agent when clicking the customer URL lin...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Excel. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during t...

Vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows operating systems, allowing a hacker to execute arbitrary code.

The vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

CVE-2021-33629

isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data...

CVE-2021-33629

isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data...

CVE-2021-33629

isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data...

isula-build 安全漏洞

isula-build is an open source iSula Container Team Container image build tool from iSula Container Team that supports fast container image building via Dockerfile files. Isula-build A security vulnerability exists in Isula-build prior to 0.9.5-8 When building container images, some functions used...

Kaseya VSA 代码问题漏洞

Kaseya VSA is RMM Remote Monitoring and Management software commonly used by Managed Service Providers MSPs of Kaseya, Inc. in the United States to manage customer networks. A code issue vulnerability exists in Kaseya VSA versions prior to 9.5.6, which arises from a network system or product that...

Eclipse Theia Code Execution Vulnerability

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A code execution vulnerability exists in Eclipse Theia 1.2.0 and prior versions, which arises from a failure of a networked system o...

Eclipse Theia 跨站脚本漏洞

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A code execution vulnerability exists in Eclipse Theia 1.2.0 and prior versions, which arises from a failure of a networked system o...

lodash code injection vulnerability

lodash is an open source JavaScript utility library. A code injection vulnerability exists in lodash, which arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of executable commands. An attacker could exploit...

vSphere Replication Command Injection Vulnerability

A command injection vulnerability exists in vSphere Replication that originates when a network system or product does not properly filter specific elements of externally entered data during the construction of executable commands. An attacker could exploit this vulnerability to execute an illegal...

MicroStrategy Intelligence Server And Web 10.4 XSS / Disclosure / SSRF / Code Execution Vulnerabilit

Exploit for multiple platform in category web applications Exploit Title: MicroStrategy Intelligence Server and Web 10.4 - multiple vulnerabilities Exploit Author: RedTimmy Security Authors blog: https://www.redtimmy.com/web-application-hacking/another-ssrf-another-rce-the-microstrategy-case/...

CVE-2012-5639

LibreOffice and OpenOffice automatically open embedded content...

Wind River Systems VxWorks Parameter Injection Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from a network system or product that does not properly filter special characters in parameters...

Dolibarr ERP/CRM Command Execution Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A code execution vulnerability exists in Dolibarr ERP/CRM. The...

Nortek Security & Control Linear eMerge 50P/5000P Command Injection Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A command injection vulnerability exists in the Nortek Security & Control Linear eMerge 50P/5000P, which can be exploited by an attacker to execute illegal operating...