25125 matches found
RNP 安全漏洞
RNP is a C++ library open-sourced by RNP. A security vulnerability exists in RNP that stems from improper PKESK session key generation...
Trustworthy GenAI over 6G: Integrated Applications and Security Frameworks
The integration of generative artificial intelligence GenAI into 6G networks promises substantial performance gains while simultaneously exposing novel security vulnerabilities rooted in multimodal data processing and autonomous reasoning. This article presents a unified perspective on cross-doma...
CVE-2025-65100: Protection Mechanism Failure
Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...
CVE-2025-65099: Improper Control of Generation of Code
Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a us...
Saysis Starcities 跨站脚本漏洞
Saysis Starcities is an application from the Turkish company Saysis. A cross-site scripting vulnerability exists in Saysis Starcities versions prior to 1.1.61, which stems from improper input neutralization during web page generation and could lead to a reflective cross-site scripting attack...
VulnCheck KEV: CVE-2023-41345
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the...
The vulnerability of the SAP Solution Manager platform, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the SAP Solution Manager software platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55056
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-64325: Improper Neutralization of Input During Web Page Generation
Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has...
CVE-2025-63693: Improper Control of Generation of Code
The comment editing template dzz/comment/template/editform.htm in DzzOffice 2.3.x lacks adequate security escaping for user-controllable data in multiple contexts, including HTML and JavaScript strings. This allows low-privilege attackers to construct comment content or request parameters and...
CVE-2025-12761: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...
EUVD-2025-197846
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55056
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...