PT-2026-23784

Name of the Vulnerable Software and Affected Versions XikeStor SKS8310-8X Network Switch versions prior to 1.04.B07 Description The XikeStor SKS8310-8X Network Switch firmware contains a stored cross-site scripting issue. Authenticated attackers can inject arbitrary script content through the...

XikeStor SKS8310-8X 跨站脚本漏洞

The XikeStor SKS8310-8X is an Ethernet switch produced by the XikeStor company. Versions of XikeStor SKS8310-8X starting from 1.04.B07 and earlier have a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting vulnerability in the System Name field,...

CVE-2025-40362 ceph: fix multifs mds auth caps issue

In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along with the associated caps. Not doing so would result in applying the mds auth caps of one fs on to the other fs in a multifs ceph...

EUVD-2019-5934

Malware in sbrugna...

EUVD-2019-5935

Malware in sbrugna...

EUVD-2012-4288

Malware in sbrugna...

CVE-2024-8084

A vulnerability, which was classified as problematic, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /php-ocls/classes/SystemSettings.php?f=updatesettings of the component Setting Handler. The manipulation of the argument System Name lea...

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

CVE-2021-26595

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...

CVE-2019-14805

studio/buildermenu.php?page=sets in UNA 10.0.0-RC1 allows XSS via the System Name field under Sets during set editing...

PT-2025-3900 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A problem was found in the Maintenance Section component of the system, affecting an unknown functionality. The issue arises from the manipulation of the System Name argument, leadi...

Trimble SPS851 代码注入漏洞

The Trimble SPS851 is a modular GPS receiver from Trimble. A code injection vulnerability exists in the Trimble SPS851 version 488.01, which stems from the fact that incorrect manipulation of the parameter System Name can lead to cross-site scripting attacks...

PT-2025-3789 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue has been found in the Receiver Status Identity Tab component of the software, affecting some unknown functionality. The manipulation of the System Name argument leads to cross-sit...

The vulnerability in the wiz_dyn.cgi script of NETGEAR XR300 microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability in the wizdyn.cgi script of NETGEAR XR300 router microprogramming software relates to the failure to take measures to neutralize special elements used in operating system commands when processing the parameter systemname. Exploiting this vulnerability allows a malicious actor to...

CVE-2024-51008

Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the systemname parameter at wizdyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

PT-2024-8274 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a command injection vulnerability in the system name parameter at the "genie dyn.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands via a...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. NETGEAR XR300 version v1.0.3.78 suffers from a command injection vulnerability that stems from the systemname parameter in the wizdyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A command injection vulnerability exists in NETGEAR XR300 v1.0.3.78, which stems from the systemname parameter in the geniedyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An attacker cou...

PT-2024-8535 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a command injection vulnerability in the system name parameter at the "wiz dyn.cgi" endpoint. This vulnerability can be exploited by sending a specially crafted request,...

Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Online Computer and Laptop Store version 1.0, which originates from a cross-site scripting vulnerability in the System Name parameter of the...