Astra Linux – vulnerability in Zabbix

An arbitrary file read vulnerability exists in the Zabbix Web Service Report Generation component, which listens on port 10053. The service fails to perform proper validation of URL parameters prior to reading files...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient validation of query parameters used in JSP file creation. An attacker can execute arbitrary code on the server by supplying crafted query parameters that cause a JSP file containing...

Mediasoftpro ASP.NET jVideo Kit SQL injection vulnerability

Mediasoftpro ASP.NET jVideo Kit is a video management and publishing component suite developed by Mediasoftpro. Version 1.0 of Mediasoftpro ASP.NET jVideo Kit contains a SQL injection vulnerability, which stems from insufficient validation of query parameter inputs, potentially allowing SQL...

Cisco IOS XE Command Injection

The vulnerability of the command-line interface in Cisco IOS XE operating systems is related to incorrect validation of query parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands...