The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

CVE-2024-56115

CVE-2024-56115 Descripción sugerida Existe una vulnerabilidad en Amiro.CMS anterior a 7.8.4 debido a la falta de medidas para neutralizar elementos especiales. Permite a atacantes remotos llevar a cabo un ataque de Cross-Site Scripting XSS. Tipo de vulnerabilidad CWE-78 | Neutralización incorrect...

xnuspy

xnuspy 编译并运行 example/open1hook.c 后内核日志的输出 xnuspy 是一个 pongoOS 模块，它安装了一个新的系统调用 xnuspyctl，允许你从用户空间钩取内核函数。它支持 checkra1n 0.12.2 及以上版本的 iOS 13.x、iOS 14.x 和 iOS 15.x。不支持 4K 设备。 该模块完全禁用 KTRR/KPP，使得在 EL1 内创建 RWX 内存成为可能。请勿在你的主力设备上使用。 需要 libusb：brew install libusb 构建 在顶层目录中运行 make。它将构建加载器和模块。 构建选项 在 make...

CVE-2026-69642

CVE-2026-69642 is a cross-site scripting (XSS) vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015), caused by improper input neutralization during web page generation. An unauthorized attacker can perform spoofing over a network with no user interaction or privileges...

EUVD-2026-73938

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-63523

CVE-2026-63523 is a stored cross-site scripting (XSS) vulnerability in Skype for Business Server , affecting the Subscription Edition , 2019 , and 2015 releases. The flaw stems from improper neutralization of input during web page generation, allowing an unauthenticated attacker to perform spoofi...

EDR-GhostLocker

GhostLocker: AppLocker-Based EDR Neutralization Introduction After my article on Fairy-Law , where I used kernel mitigations to disable Endpoint Detection & Response EDR solutions, diversenok pointed out that IFEO exclusions Image File Execution Options were too invasive for third-party...

CVE-2026-84387

A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...

CVE-2026-69417

CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...

EUVD-2026-73696

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69402

CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...

EUVD-2026-73694

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-65669

CVE-2026-65669 is an elevation of privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in output used by a downstream component (injection). An unauthorized attacker can exploit it over a network with low complexity and no prior privileges , though...

EUVD-2026-73157

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-73125

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69356

CVE-2026-69356 is a CRITICAL (CVSS 9.3) vulnerability in Microsoft Exchange Server involving improper neutralization of input during web page generation, commonly referred to as cross-site scripting (XSS) . An unauthorized network attacker can leverage this flaw to perform spoofing , with high im...

CVE-2021-22204

CVE-2021-22204 - ExifTool Ejecución Arbitraria de Código Un proof-of-concept mejorado para CVE-2021-22204, una vulnerabilidad en las versiones 7.44 a 12.23 de ExifTool que permite la ejecución arbitraria de código al procesar archivos DjVu maliciosos. Créditos Este es un trabajo derivado. La...

Microsoft Discovery Studio Information Disclosure Vulnerability

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...

Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.2.5 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-43971...

CVE-2026-81798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1...