The vulnerability of the `parse_user_filters` function in the SupportCandy plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the parseuserfilters function in the SupportCandy plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

TOTOLINK X6000R Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R v9.4.0cu.652B20230116 version that stems from a remote command execution vulnerability in the method in the sub41E588 location...

XWiki Rendering Security Vulnerability

XWiki Rendering is a general-purpose rendering system from the XWiki Foundation that converts text input from a given syntax wiki syntax, HTML, etc. to another syntax XHTML, etc.. A security vulnerability exists in XWiki Rendering that stems from a footnote macro executing its contents in possibl...

The vulnerability of the /importexport.php file in the D-Link DAR-7000 router microprogramming system allows a hacker to execute arbitrary SQL code.

The vulnerability of the /importexport.php file in the D-Link DAR-7000 router microprogramming system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2023-5698

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects unknown code of the file pagesdepositmoney.php. The manipulation of the argument accountnumber with the input 421873905--alert9523!-- leads to cross site scripting. The attack...

CVE-2023-42295

An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the readrleimage function of file bifs/unquantize.c...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a perpetrator to execute arbitrary commands on a device with root privileges.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on a device with root privileges remotely...

CVE-2023-46300

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

CVE-2023-46300

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

The vulnerability of the SolarWinds Access Rights Manager software lies in its ability to restore unreliable data in memory, allowing a intruder to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager access control software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Advisory ROSA-SA-2023-2249

software: xrdp 0.9.22.1 OS: ROSA-CHROME packageevrstring: xrdp-0.9.22.1-1.src.rpm CVE-ID: CVE-2022-23468 BDU-ID: 2022-07312 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the xrdploginwndcreate function of the XRDP server involves buffer copying without checking the size of the input data...

Important: Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update

An update for foremanyggworker, puppet-agent, qpid-proton, and yggdrasil is now available for Satellite Client 6 for RHEL 6, Satellite Client 6 for RHEL 7, Satellite Client 6 for RHEL 8, and Satellite Client 6 for RHEL 9. Red Hat Product Security has rated this update as having a security impact ...

CVE-2023-23373

An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 2023/06/15 and later...

CVE-2023-23373

CVE-2023-23373 relates to an OS command injection in QNAP’s QUSBCam2. Affected versions are those prior to 2.0.3; exploitation could allow remote command execution over the network. The vulnerability root cause is not expanded beyond “OS command injection” in the provided documents, but multiple ...

Ubuntu 16.04 ESM : Firebird vulnerability (USN-4822-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4822-1 advisory. It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service crash or possib...

SolarWinds Access Rights Manager Code Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A code issue vulnerability exists in SolarWinds Access Rights Manager. An attacker could exploit this vulnerability to remotely execute code...

Out-of-bounds

In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35084

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely...

CVE-2022-22375

IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 221681...