CVE-2020-28421

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...

CVE-2018-19855

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features...

CVE-2017-1712

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iteratively query a server running a vulnerable TLS stack...

CVE-2025-39409

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0...

Integrating Robotic Navigation with Blockchain: a Novel PoS-Based Approach for Heterogeneous Robotic Teams

This work explores a novel integration of blockchain methodologies with Wide Area Visual Navigation WAVN to address challenges in visual navigation for a heterogeneous team of mobile robots deployed for unstructured applications in agriculture, forestry, etc. Focusing on overcoming challenges suc...

CVE-2025-39409

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0...

CVE-2025-39409 WordPress WordPress Video Robot - The Ultimate Video Importer plugin <= 1.20.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0...

CVE-2025-39409 WordPress WordPress Video Robot - The Ultimate Video Importer plugin <= 1.20.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0...

CVE-2025-39409

CVE-2025-39409 describes a reflected Cross-Site Scripting (XSS) in the WordPress plugin “WordPress Video Robot – The Ultimate Video Importer” from version 1.20.0 and earlier. The CVE record notes improper input handling during web page generation, enabling injection of scripts. CVSS v3.1 vector i...

WordPress plugin WordPress Video Robot - The Ultimate Video Importer 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin WordPress Video Robot - The Ultimate Video Importer A cross-site...

PT-2025-22077 · WordPress · Wordpress Video Robot - The Ultimate Video Importer

Name of the Vulnerable Software and Affected Versions: WordPress Video Robot - The Ultimate Video Importer versions 1.20.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for malicious...

CVE-2025-47948 Cocotais Bot has builtin .echo command injection

Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized...

CVE-2025-47948 Cocotais Bot has builtin .echo command injection

Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized...

CVE-2025-47948 Cocotais Bot has builtin .echo command injection

Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized...

CVE-2025-46546

In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll,...

Franka Emika Robot 代码问题漏洞

Franka Emika Robot is a robot from Franka, Germany. A code issue vulnerability exists in Franka Emika Robot that stems from an improper implementation of JSON Web Tokens, which allows an unauthenticated, remote attacker to guess a valid session ID and impersonate the user to gain full access...

Franka Emika Robot 安全漏洞

Franka Emika Robot is a robot from the German company Franka. A security vulnerability exists in Franka Emika Robot that stems from a lack of authorization and allows an unauthenticated, remote attacker to connect over HTTPS and trigger a close button resulting in a denial of service attack...

Franka Emika Robot 安全漏洞

Franka Emika Robot is a robot from the German company Franka. A security vulnerability exists in Franka Emika Robot that stems from an improper authentication mechanism that allows an unauthenticated, remote attacker to enumerate valid usernames...

PT-2025-17725 · Franka Robotics · Franka Emika Robot

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue exists due to an improper authentication mechanism, allowing an unauthenticated remote attacker to enumerate valid usernames. Recommendations: At the moment, there is no information...

CVE-2025-31776

Cross-Site Request Forgery CSRF vulnerability in Aphotrax Uptime Robot Plugin for WordPress uptime-robot-monitor allows Cross Site Request Forgery.This issue affects Uptime Robot Plugin for WordPress: from n/a through = 2.3...