175 matches found
Remotecontrolio Remote Keyboard Desktop 操作系统命令注入漏洞
Remotecontrolio Remote Keyboard Desktop is a remote control application from Remotecontrolio. An operating system command injection vulnerability exists in Remotecontrolio Remote Keyboard Desktop version 1.0.1, which stems from a flaw in the rundll32.exe export function that could lead to...
CVE-2025-13133 Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injection
The Simple User Import Export plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.1.7 via the 'Import/export users' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed untrusted input into export...
The vulnerability of the download() and export() functions in the Nagios XI monitoring tool allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the download and export functions of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements used in operating systems when processing PDF format files. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
SuiteCRM 安全漏洞
SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions prior to 7.12.6 that stems from a SQL injection vulnerability when handling the parameter uid in the export function, which could lead to the execution of arbitrary...
GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd
Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...
CVE-2025-62720 LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links
LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the...
JeeWMS 安全漏洞
JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS version 20250820, which stems from the exportXls function not handling input correctly, which could lead to an SQL injection attack...
EUVD-2020-15153
Malware in sbrugna...
EUVD-2019-4536
Malware in sbrugna...
EUVD-2019-16929
Malware in sbrugna...
EUVD-2020-30277
Malware in sbrugna...
EUVD-2019-7707
Malware in sbrugna...
EUVD-2018-21435
Malware in sbrugna...
EUVD-2017-14485
Malware in sbrugna...
EUVD-2022-0796
Malicious code in bioql PyPI...
EUVD-2024-16901
Malicious code in bioql PyPI...
CVE-2023-53203 wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: rely on mt76connac2mactxrateval In order to fix a possible NULL pointer dereference in mt7996macwritetxwi of vif pointer, export mt76connac2mactxrateval utility routine and reuse it in mt7996 driver...
CVE-2024-33146
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...