506 matches found
CVE-2024-41997
An issue was discovered in version of Warp Terminal prior to 2024.07.18 v0.2024.07.16.08.02. A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the warp://action/docker/opensubshell intent that when clicked ...
CVE-2024-7840
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7840
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...
PT-2024-38619 · Progress · Telerik Reporting
Name of the Vulnerable Software and Affected Versions: In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924 Description: A command injection attack is possible through improper neutralization of hyperlink elements. This issue arises due to the improper handling of hyperlink element...
CVE-2024-7840: Improper Neutralization of Special Elements used in a Command
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-45292
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. \PhpOffice\PhpSpreadsheet\Writer\Html does not sanitize "javascript:" URLs from hyperlink href attributes, resulting in a Cross-Site Scripting vulnerability. This issue has been addressed in release versions 1.29.2,...
PT-2024-31545
Name of the Vulnerable Software and Affected Versions PHPSpreadsheet versions prior to 1.29.2 PHPSpreadsheet versions prior to 2.1.1 PHPSpreadsheet versions prior to 2.3.0 Description The PhpOfficePhpSpreadsheetWriterHtml component in PHPSpreadsheet does not sanitize "javascript:" URLs from...
Telerik UI for WPF < 2024.3.924 Multiple Vulnerabilities
The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q3 2024.3.924. It is, therefore, affected by multiple vulnerabilities: - A command injection attack is possible through improper neutralization of hyperlink elements. CVE-2024-7575 - A code execution...
CVE-2024-7679
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7575
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7575
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7679
Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924) are vulnerable to a command injection attack. The root cause is the improper neutralization of hyperlink elements , which could allow an attacker to execute arbitrary commands. To remediate this vulnerability, users should up...
CVE-2024-7679 Improper neutralization special element in hyperlinks
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
PT-2024-38429 · Telerik · Telerik Ui For Wpf
Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: A command injection attack is possible due to improper neutralization of hyperlink elements. This issue arises from the improper handling of certain elements, allowing for...
PT-2024-38501 · Progress · Telerik Ui For Winforms
Name of the Vulnerable Software and Affected Versions: Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924 Description: A command injection attack is possible through improper neutralization of hyperlink elements. This issue affects earlier versions of Progress Telerik UI for WinForms,...
Telerik UI command injection vulnerability
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...
CVE-2024-7575: Improper Neutralization of Special Elements used in a Command
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7679: Improper Neutralization of Special Elements used in a Command
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
Rockwell Automation ThinManager Code Execution
The vulnerability of the Rockwell Automation ThinManager application platform for centralized application management is related to errors in processing hypertext links. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted POST reques...
