CVE-2023-45795 Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx

A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device...

The vulnerability of the WebUI component of the software-hardware complex for diagnosing and monitoring railway infrastructure, the Frauscher FDS102, allows a intruder to gain full control over the device.

The vulnerability of the WebUI component of the software-hardware complex for diagnosing and monitoring railway infrastructure, the Frauscher FDS102, is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can...