1109 matches found
The vulnerability of the SetNetworkSettings() function in the prog.cgi script of the D-link DIR-878A1 router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the SetNetworkSettings function in the prog.cgi script of the D-link DIR-878A1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...
The vulnerability of the eval() function on the DocsGPT software platform allows a perpetrator to execute any Python code.
The vulnerability of the eval function in the DocsGPT software platform for generative artificial intelligence involves a lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary Python code...
The vulnerability in the embedded web server microprogramming software of D-Link routers such as DWR-M920, DWR-M921, DIR-822K, and DIR-825M allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the embedded web server microprogramming software in D-Link routers such as DWR-M920, DWR-M921, DIR-822K, and DIR-825M is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
WordPress plugin WP Company Info 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
SOPlanning 跨站脚本漏洞
SOPlanning is a suite of online project management software from SOPlanning, Inc. A cross-site scripting vulnerability exists in SOPlanning versions prior to 1.55, which stems from the /status endpoint that does not properly clean inputs, and could lead to stored cross-site scripting...
SourceCodester AI Font Matcher 安全漏洞
SourceCodester AI Font Matcher is an ai font recognizer from SourceCodester open source. A security vulnerability exists in SourceCodester AI Font Matcher, which stems from improper cleaning of font family names and could lead to cross-site scripting attacks...
tQuadra CMS 安全漏洞
tQuadra CMS is a content management system from the Italian company tQuadra CMS. A security vulnerability exists in tQuadra CMS version 4.2.1117, which stems from the /styles path not being properly cleaned of user input, which could lead to a local file inclusion attack...
The vulnerability of the OpenEdge software platform, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary code.
The vulnerability of the OpenEdge software platform is related to the lack of measures taken to clean data at the management level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...
WordPress Advanced Database Cleaner plugin cross-site request forgery vulnerability
WordPress Advanced Database Cleaner plugin a plugin for cleaning and optimizing WordPress databases to help users remove redundant data such as spam comments, old drafts, etc., improve site performance and reduce database size. The WordPress Advanced Database Cleaner plugin suffers from a...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27646)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from insufficient cleaning and escaping of the pienumber parameter, which can be exploited by an attacker to injec...
WordPress plugin Responsive Progress Bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
The vulnerability of the Claude Code tool, related to improper cleaning of input data, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Claude Code tool arises due to incorrect cleaning of input data. Exploiting this vulnerability allows a remote attacker to compromise confidentiality and execute arbitrary commands...
The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to carry out spear-phishing attacks.
The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to carry out spear-phishing attacks.
The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of the ping6() function in D-Link DSL-7740C router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the ping6 function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the setEasyMeshAgentCfg function in the microprogramming software for TOTOLINK X18 allows a hacker to execute arbitrary commands.
The vulnerability of the setEasyMeshAgentCfg function in the microprogramming software for TOTOLINK X18 lies in the lack of measures taken to clean data at the management level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
EUVD-2014-3953
Malware in sbrugna...
EUVD-2018-17945
Malware in sbrugna...