146 matches found
EUVD-2012-6579
Malware in sbrugna...
EUVD-2006-6466
Malware in sbrugna...
Improper Neutralization of Null Byte or NUL Character
Overview Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the handling of URIs in ssh://. An attacker can inject shell expressions into command-line constructor by supplying URIs containing \0 characters. This is only exploitable if URI...
EUVD-2023-1579
Malicious code in bioql PyPI...
EUVD-2022-1597
Malicious code in bioql PyPI...
CVE-2012-10034
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
CVE-2012-10034
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
CVE-2012-10034
CVE-2012-10034 affects ClanSphere 2011.3 with a local file inclusion (LFI) flaw caused by improper handling of the cs_lang cookie parameter; unsanitized input enables directory traversal and reading files outside the web root, with null byte (%00) injection to bypass file extension checks. Public...
CVE-2012-10034 ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
CVE-2012-10034 ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
PT-2025-31986 · Unknown · Clansphere
Name of the Vulnerable Software and Affected Versions: ClanSphere version 2011.3 Description: ClanSphere version 2011.3 is susceptible to a local file inclusion flaw because of improper handling of the cs lang cookie parameter. The application does not sanitize user-supplied input, which allows...
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎...
Remote Code Execution (RCE)
openmeetings is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library does not properly validate the paths, which allows an attacker to perform malicious code execution through the null-byte injection...
Apache OpenMeetings 2.0.0 < 7.1.0 Multiple Vulnerabilities
Apache OpenMeetings is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:openmeetings";...
GHSA-MG5H-F3Q8-C96G Apache OpenMeetings vulnerable to remote code execution via null-bye injection
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0...
Apache OpenMeetings vulnerable to remote code execution via null-bye injection
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0...
Design/Logic Flaw
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0...
CVE-2023-29246 Apache OpenMeetings: allows null-byte Injection
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0...
CVE-2023-29246 Apache OpenMeetings: allows null-byte Injection
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0...
CVE-2023-29246
CVE-2023-29246 affects Apache OpenMeetings 2.0.0–7.1.0. A code execution vulnerability arises from improper input validation, enabling RCE via null-byte injection once an admin account is compromised. Several sources corroborate the affected product/version range and the RCE impact. Mitigation in...