PT-2024-32896 · Unknown · Tiki Wiki Cms

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMS affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This vulnerability allows for the execution o...

Boa Webserver 跨站脚本漏洞

Boa Webserver is a lightweight and efficient web server software. A cross-site scripting vulnerability exists in Boa Webserver, which stems from improper input neutralization during web page generation, resulting in a cross-site scripting vulnerability...

Tiki wiki cms 操作系统命令注入漏洞

Tiki wiki cms is a website CMS. An operating system command injection vulnerability exists in versions of Tiki Wiki CMS prior to version 28, which stems from an improper neutralization of special elements used in operating system commands, resulting in an operating system command injection...

Tecnick TCExam 跨站脚本漏洞

Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams and so on. Tecnick TCExam suffers from a cross-site scripting vulnerability that originates from improper input neutralization during web page generation, resulting in a...

PT-2024-32892 · Mobotix · Cctv Fw

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This is a type of security...

GHSA-J5VV-6WJG-CFR8 changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

Summary Improper input validation in the application can allow attackers to perform local file read LFR or path traversal attacks. These vulnerabilities occur when user input is used to construct file paths without adequate sanitization or validation. For example, using file:../../../etc/passwd o...

CVE-2024-56509 changedetection.io has Improper Input Validation Leading to LFR/Path Traversal

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Improper input validation in the application can allow attackers to perform local file read LFR or path traversal attacks. These vulnerabilities occur when user input is...

CVE-2024-56509

CVE-2024-56509 affects changedetection.io. The issue is improper input validation that enables local file read (LFR) or path traversal when user-supplied input is used to build file paths (e.g., file:../../../etc/passwd). The vulnerability is triggered via URLs processed by the application and is...

CVE-2024-56509 changedetection.io has Improper Input Validation Leading to LFR/Path Traversal

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Improper input validation in the application can allow attackers to perform local file read LFR or path traversal attacks. These vulnerabilities occur when user input is...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation due to missing sanitization of the font-family attribute. Remediation Upgrade tecnickcom/tcpdf to version 6.8.0 or higher. References - GitHub Commit...

changedetection.io 安全漏洞

changedetection.io is a website change detection, monitoring and notification application by dgtlmoon individual developer. A security vulnerability exists in changedetection.io that stems from improper input validation...

CVE-2024-1609 OPPO Store APP has a WebView component privilege escalation vulnerability.

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation...

The vulnerability of the mac80211 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mac80211 component in the Linux operating system’s kernel is related to improper input validation in the function ieee80211parseelemscrc. Exploiting this vulnerability can allow an attacker to cause a service failure...

OPPO Store APP 安全漏洞

OPPO Store app is a cell phone store application from the Chinese company OPPO. A security vulnerability exists in OPPO Store APP, which stems from improper input validation. An attacker can exploit the vulnerability to elevate privileges...

CVE-2024-41886 Improper Input Validation

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...

CVE-2024-41886

CVE-2024-41886 affects an NVR where an attacker could inject malformed data into URL input parameters to trigger remote code execution and reboot the device. The root cause is improper handling of URL input leading to RCE, with an impact on availability (reboot) and negligible confidentiality/ in...

CVE-2024-41886 Improper Input Validation

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toHTMLEx method due to improper input sanitization. An attacker can execute arbitrary JavaScript code by injecting malicious scripts into the input data processed by this method. Details Cross-site...

GO-2024-3349 OpenShift Must Gather Operator Improper Input Validation vulnerability in github.com/openshift/must-gather

OpenShift Must Gather Operator Improper Input Validation vulnerability in github.com/openshift/must-gather. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

Browsershot Improper Input Validation vulnerability

Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a local file. Note:...