CVE-2024-28111

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

The vulnerability of the Nikto web application security scanner lies in the lack of mechanisms to neutralize special elements in the input commands of the operating system. This allows attackers to execute arbitrary commands on the operating system.

The vulnerability of the Nikto web scanner is related to the lack of neutralization of special elements in the input data of the operating system during the generation of CSV files containing the results of scanning. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...