Telecommunications Systems Mitel Connect OnSite ST14.2 Code Execution

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems relates to improper code generation. Exploiting this vulnerability allows an attacker to inject arbitrary code into the generated PHP file and execute it using specially crafted requests to th...

SAP HANA XSJS Execution

The vulnerability of the Development Workbench component of the SAP HANA database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary XSJS code remotely...