Lucene search
+L

4 matches found

BDU FSTEC
BDU FSTEC
added 3 days ago5 views

The vulnerability of the quote() function in the shell-quote npm package, which allows a hacker to execute arbitrary code.

The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS6AI score0.00848EPSS
SaveExploits1References5Affected Software11
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.8 views

The vulnerability of the SINEMA Remote Connect VPN service, related to the lack of data cleansing at the management level, allows a perpetrator to execute arbitrary codes.

The vulnerability of the SINEMA Remote Connect VPN service lies in the lack of measures taken at the administrative level for data cleansing. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with system privileges...

7.8CVSS7.6AI score0.00902EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:0 a.m.9 views

The vulnerability of the QTS operating system’s network storage solutions on QNAP allows attackers to carry out XSS attacks.

The vulnerability of the QTS operating system and QNAP network storage devices exists due to insufficient data cleaning. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.2AI score0.00452EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.24 views

Rails 安全漏洞

Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. A security vulnerability exists in versions prior to Rails v6.1.7.3, which stems from insufficient cleansing of user-supplied data, that could allow a remote attacker to trick a victim...

5.3CVSS6.6AI score0.00923EPSS
SaveExploits0References11
Rows per page
Query Builder