970 matches found
CVE-2021-22204
CVE-2021-22204 CVE摘要 在ExifTool 7.44及以上版本中，对DjVu文件格式中用户数据的清理不当，允许在解析恶意图像时执行任意代码。 受影响版本 版本 7.44 - 12.23 依赖项 依赖：djvulibre-bin exiftool 调用以下三个命令：bzz, djvumake, exiftool 参考资料 GitHub POC - Gustavo Dutra，2021年5月11日 案例研究：CVE-2021-22204 Exiftool RCE - Gustavo Dutra，2021年5月19日 CVE详情 - CVSS评分6.8...
CVE-2023-24278
CVE-2023-24278 - Squidex 中的反射型 XSS 漏洞 概述 CVE ID: CVE-2023-24278 受影响产品: Squidex 7.4.0 之前的所有版本 报告者: Ioannis Christodoulakos 本仓库提供了关于 Squidex 开源无头 CMS 软件中发现的两个反射型跨站脚本（XSS）漏洞的信息及利用方式。这些漏洞影响 7.4.0 之前的所有版本，攻击者可通过向 /squid.svg 端点的特定查询参数中注入代码，在受害者浏览器中执行恶意 JavaScript 代码。 漏洞详情 漏洞是由于 /squid.svg 端点的 text 和...
CVE-2026-84047
The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-79971
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to scri...
CVE-2026-79971
Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Sanitization of Custom Special Characters vulnerability that allows an unauthenticated remote attacker to perform script injection . The affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00....
EUVD-2026-75012
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to scri...
CVE-2024-21534
CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...
CVE-2026-45525
In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28638
In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74001
In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45525
CVE-2026-45525 is an improper data sanitization flaw (CWE-200) in the Android Media Provider component (Project Mainline), caused by a logic error in the code. It allows local information disclosure of internal database state records with low privileges and no user interaction required. The vulne...
CVE-2021-43530-UXSS-On-QRcode-Reader-
CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 Una vulnerabilidad de XSS universal estaba presente en Firefox para Android, resultante de una sanitización incorrecta al procesar una URL escaneada desde un código QR. Este bug solo afecta a Firefox para Android. Otros sistemas operativos no s...
CVE-2026-81581 User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...
CVE-2026-81581
WibuKey up to 6.70 for Windows contains an improper validation of memory boundaries vulnerability in its WibuKey64.sys kernel driver. User input is used without proper sanitization to compute a pointer address, allowing an attacker to point to arbitrary memory outside the driver's scope. The typi...
EUVD-2026-65203
Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when...
Astra Linux – Vulnerability in Yard
YARD is a Ruby documentation tool. The “frames.html” file within the Yard Doc’s generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the “frames.erb” template file. This vulnerability has been fixed...
.NET: .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73266
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
