GHSA-HVX9-HWR7-WJJ9 Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

Summary On Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. This is not caused by a caller passing attacker-controlled arguments into networkInterfaces. The vulnerable value is...

CVE-2021-47771

Affected software: RDP Manager 4.9.9.3. Vulnerability: denial-of-service via malformed input fields in the connection configuration, specifically Verbindungsname and Server, allowing a local attacker to freeze/crash the application and potentially require full reinstallation. Root cause: input fi...

CVE-2025-34304

IPFire versions prior to 2.29 Core Update 198 contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTIONNAME parameter. When viewing a range of OpenVPN connection logs, the application issues...

EUVD-2025-36510

IPFire versions prior to 2.29 Core Update 198 contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTIONNAME parameter. When viewing a range of OpenVPN connection logs, the application issues...

CVE-2025-34304

IPFire versions prior to 2.29 Core Update 198 contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTIONNAME parameter. When viewing a range of OpenVPN connection logs, the application issues...

CVE-2025-34304 IPFire < v2.29 SQL Injection via OpenVPN Connection Logs

IPFire versions prior to 2.29 Core Update 198 contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTIONNAME parameter. When viewing a range of OpenVPN connection logs, the application issues...

CVE-2025-34304 IPFire < v2.29 SQL Injection via OpenVPN Connection Logs

IPFire versions prior to 2.29 Core Update 198 contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTIONNAME parameter. When viewing a range of OpenVPN connection logs, the application issues...

IPFire 安全漏洞

IPFire is an open source Linux distribution from the IPFire organization. It is primarily used as a router and firewall. A security vulnerability exists in IPFire versions prior to 2.29 that stems from insufficient cleaning and escaping of the CONNECTIONNAME parameter, which could lead to an SQL...

EUVD-2009-1261

Malware in sbrugna...

EUVD-2020-10588

Malware in sbrugna...

CVE-2020-18664

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

CVE-2025-29322

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

CVE-2025-29322

The low-code application development platform ScriptCase is vulnerable to a cross-site scripting (XSS) vulnerability in versions prior to v1.0.003 - Build 3 . The root cause is the improper neutralization of input, where a specially crafted payload submitted to the **

PT-2025-12992

Name of the Vulnerable Software and Affected Versions ScriptCase versions prior to 1.0.003 - Build 3 Description A cross-site scripting XSS issue allows attackers to execute arbitrary code via a crafted payload to the Connection Name in the New Connection and Rename Connection pages...

CVE-2025-29322: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

SUSE CVE-2011-3364

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...

CVE-2020-18664

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

Cross site scripting

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

CVE-2020-18664

Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...

PT-2021-10203

Name of the Vulnerable Software and Affected Versions: WebPort versions 1.19.1 and earlier Description: A Cross Site Scripting XSS issue exists via the connection name parameter in type-conn. This allows for potential malicious script execution. The estimated number of potentially affected device...