2769 matches found
The vulnerability of the Veeam Agent for Microsoft Windows data backup tool lies in insufficient validation of input data, which allows attackers to exploit this flaw to gain increased privileges.
The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-41021
Stored Cross-Site Scripting XSS in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=productupdate'. This vulnerability could allow a remote user to send a specially...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-24203)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...
GHSA-JQ43-27X9-3V86 Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Summary An SMTP Command Injection CRLF Injection vulnerability in Netty's SMTP codec allows a remote attacker who can control SMTP command parameters e.g., an email recipient to forge arbitrary emails from the trusted server. This bypasses standard email authentication and can be used to...
CVE-2025-59257
Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
CVE-2025-59190
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Rockwell Automation Comms-1783-NATR 安全漏洞
Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. The Rockwell Automation Comms-1783-NATR is vulnerable to a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit...
CVE-2025-31717
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2025-61773
pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...
EUVD-2025-33689
Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createinvoicesubmit.php”, using the “customerName0” parameter. This vulnerability could allow a...
Exploit for Improper Input Validation in Microsoft
MSMQ Vulnerability Proof of Concept This repository contains...
PT-2025-41449
Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev91 Description pyLoad is a free and open-source download manager written in Python. Versions prior to 0.5.0b3.dev91 have insufficient input validation in the web interface, specifically in the Captcha script...
CVE-2025-40887
CVE-2025-40887 describes a SQL Injection in the Alert functionality of Nozomi Guardians/CMC. The issue arises from improper validation of an input parameter, enabling an authenticated user with limited privileges to run arbitrary SELECT SQL statements against the backend DBMS, potentially exposin...
CVE-2025-40886 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...
EUVD-2009-0798
Malware in sbrugna...
EUVD-2017-15818
Malware in sbrugna...