CVE-2024-22372

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...

DEBIAN-CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

Snapcast Security Breach

Snapcast is a multi-room client-server audio player where all clients are synchronized with server time to play perfectly synchronized audio. A security vulnerability exists in Snapcast version 0.27.0, which stems from a vulnerability that could allow a remote attacker to execute arbitrary code a...

Trend Micro Apex Central 安全漏洞

Trend Micro Apex Central is a Web-based product console from Trend Micro. A local file inclusion vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to execute arbitrary code in the system context by submitting a special request...

CVE-2023-48118

SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page...

Sql injection

SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page...

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools for installation work in production lines allows a perpetrator to execute arbitrary commands with elevated privileges.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50694

An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component...

Design/Logic Flaw

An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to execute arbitrary code via a crafted request to the parser.nim component...

Cross site request forgery (csrf)

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50694

CVE-2023-50694 affects dom96 HTTPbeast (versions <= 0.4.1) due to insufficient parsing in the parser.nim component. The issue enables a remote attacker to cause harm by sending a crafted HTTP request; some sources indicate potential arbitrary code execution via the crafted request. The informa...

CVE-2023-50694

An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component...

PT-2024-13952 · Jester · Jester

Name of the Vulnerable Software and Affected Versions: Jester versions 0.6.0 and earlier Description: An issue in Jester allows a remote attacker to execute arbitrary code via a crafted request. This enables the attacker to send a maliciously crafted request, potentially leading to arbitrary code...

CVE-2023-50694

An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50694

An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component...

PT-2024-13948 · Ebyte · Ebyte E880-Ir01-V1.1

Name of the Vulnerable Software and Affected Versions: EBYTE E880-IR01-V1.1 Description: An issue discovered in the software allows an attacker to obtain sensitive information via a crafted POST request to the "/cgi-bin/luci" API endpoint. The POST request is used to exploit this issue, but...

CVE-2023-5006

The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request...