Exploit for Special Element Injection in Rocket.Chat

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page !...

Cross-site Scripting (XSS)

rails-html-sanitizer is vulnerable to a Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of HTML content when specific configurations are used. If HTML5 sanitization is enabled and the application developer overrides the sanitizer's allowed tags to include both "math" a...

PT-2024-26897

Name of the Vulnerable Software and Affected Versions ansibleguy-webui versions prior to 0.0.21 Description The issue allows injection of HTML elements in multiple forms, which are then evaluated by the browser after job actions are executed. This can lead to potential security risks. There are n...

Important: firefox

Issue Overview: Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file. CVE-2021-28429 A vulnerability was found in expat. With this flaw, it is possible to create a...

CVE-2023-1758

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

Design/Logic Flaw

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1758

CVE-2023-1758 affects thorsten/phpmyfaq (phpMyFAQ) prior to version 3.1.12. The issue is a failure to sanitize special elements into a different plane, which enables stored cross-site scripting (XSS) via the FAQ comment username parameter. The vulnerability is documented by multiple sources (GitH...

CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream...

CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream...

Special Element Injection

curl is vulnerable to Special Element Injection. The library allows users to pass on user name and telnet options to the server without proper input scrubbing, allowing them to pass on content or do option negotiation without the application intending to do so...

SUSE CVE-2023-0302

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

Special Element Injection

radare2, edge is vulnerable to Special Element Injection. The vulnerability exists due to improper implementation special elements into a different plane which allows an attacker to inject and execute malicious sql queries on the system...

CVE-2023-0302

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

UBUNTU-CVE-2023-0302

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

radare2 注入漏洞

radare2 is a set of libraries and tools for working with binaries. radare2 versions prior to 5.8.2 have a security vulnerability that stems from the inability to clean up special elements to a different plane and the presence of special element injection. No detailed vulnerability details are...

CVE-2023-0302 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

PT-2023-16157 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.2 Description: The issue is related to a failure to sanitize special elements into a different plane, also known as Special Element Injection. This problem affects the radare2 GitHub repository. There is no...

CVE-2023-0302 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

CVE-2023-0302

Technical details (affected components, exact impact, exploitation) are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories.