37814 matches found
Code-Projects Online Bike Rental System 代码注入漏洞
Code-Projects Online Bike Rental System is a Code-Projects open source online bike rental system. Code-Projects Online Bike Rental System version 1.0 suffers from a code injection vulnerability that stems from susceptibility to cross-site scripting attacks...
Drupal 安全漏洞
Drupal is an open source content management system developed using the PHP language by the Drupal community. A security vulnerability exists in Drupal Opigno group manager prior to version 3.1.1, which stems from an unsuccessful neutralization of directives in statically saved code, resulting in ...
CampCodes DepEd Equipment Inventory System 代码注入漏洞
CampCodes DepEd Equipment Inventory System is a DepEd equipment inventory system from CampCodes, Inc. A code injection vulnerability exists in version 1.0 of the CampCodes DepEd Equipment Inventory System, which stems from the parameter data being susceptible to cross-site scripting attacks...
REDAXO 代码注入漏洞
REDAXO is REDAXO open source a content management system . REDAXO 5.18.1 version of the existence of code injection vulnerability , the vulnerability stems from the file / index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of Article Name parameter can lead to...
CVE-2024-13187
A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit...
CVE-2024-13187
CVE-2024-13187 affects Kingsoft WPS Office 6.14.0 for macOS, with the vulnerable element being the TCC Handler. The documented impact is code injection that can be triggered by a local attacker on the host. Exploitation has been disclosed publicly per sources, and the vendor was not responsive to...
CVE-2024-13187 Kingsoft WPS Office TCC code injection
A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit...
CVE-2024-13187 Kingsoft WPS Office TCC code injection
A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component TCC Handler. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit...
CVE-2025-20166
CVE-2025-20166 affects Cisco Common Services Platform Collector (CSPC). The vulnerability is an authenticated, remote cross-site scripting (XSS) flaw in the CSPC web-based management interface caused by insufficient validation of user-supplied input. An attacker with at least a low-privileged acc...
CVE-2025-22136
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...
CVE-2025-22136 Tabby has a TCC Bypass via Misconfigured Node Fuses
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...
CVE-2025-22136
Tabby (formerly Terminus) is affected by CVE-2025-22136. Prior to version 1.0.217, Tabby enables several high‑risk Electron fuses (RunAsNode, EnableNodeCliInspectArguments, EnableNodeOptionsEnvironmentVariable) that can create code injection vectors despite a hardened runtime and lack of dangerou...
CVE-2025-22136 Tabby has a TCC Bypass via Misconfigured Node Fuses
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...
PT-2025-1022 · Cisco · Cisco Common Services Platform Collector
Name of the Vulnerable Software and Affected Versions: Cisco Common Services Platform Collector CSPC affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to...
Viwis LMS 代码注入漏洞
Viwis LMS is a Learning Management System from Viwis Corporation, USA. A code injection vulnerability exists in Viwis LMS version 9.11, which stems from a cross-site scripting attack caused by manipulation of the filename parameter in the file upload component...
WordPress plugin WordPress File Upload 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...
PT-2025-2045 · Kingsoft · Kingsoft Wps Office
Name of the Vulnerable Software and Affected Versions: Kingsoft WPS Office version 6.14.0 Description: A critical issue was found in the TCC Handler component of Kingsoft WPS Office, allowing for code injection. The manipulation can lead to an attack on the local host. The issue has been publicly...
Kingsoft WPS Office 安全漏洞
Kingsoft WPS Office is a kind of office software from Kingsoft China. It provides document processing functions. A security vulnerability exists in Kingsoft WPS Office macOS version 6.14.0, which stems from an unknown feature of the component TCC Handler can lead to code injection...
Tabby 代码注入漏洞
Tabby Terminus is a highly configurable terminal emulator, SSH, and serial client for Windows 10, macOS, and Linux from the individual developers at Eugene. A code injection vulnerability exists in Tabby versions prior to 1.0.217, which stems from its enabling of multiple high-risk Electron Fuses...
