CVE-2026-25573

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise...

EUVD-2022-7521

Malicious code in bioql PyPI...

GHSA-5X84-Q523-VVWR nosurf vulnerable to improper input validation

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

nosurf vulnerable to improper input validation

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

Input validation

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

CVE-2020-36564

CVE-2020-36564 affects the Go package github.com/justinas/nosurf. The issue arises from improper validation of caller input: if the provided expected token is malformed, validation is silently disabled, causing any user-supplied token to be treated as valid. This undermines CSRF protection by eff...

CVE-2020-36564 Improper input validation in github.com/justinas/nosurf

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

GO-2020-0049 Improper input validation in github.com/justinas/nosurf

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

PT-2021-12079 · Github.Com/Justinas/Nosurf +3 · Github.Com/Justinas/Nosurf +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises due to improper validation of caller input. If the provided expected token is malformed, validation is silently disabled, causing any...