1312 matches found
PT-2025-17687 · Harman · Harman Becker Mgu21
Name of the Vulnerable Software and Affected Versions: Harman Becker MGU21 affected versions not specified Description: The issue is related to improper input validation in the Bluetooth component, which can lead to a denial-of-service condition. This was discovered by researchers Aaron Luo, Glor...
CVE-2025-29660
A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary scripts present on the device by sending specially crafted TCP requests using directory...
PT-2025-17441 · Yi · Yi Iot Xy-3820
Name of the Vulnerable Software and Affected Versions: Yi IOT XY-3820 version 6.0.24.10 Description: A vulnerability exists in the daemon process of the Yi IOT XY-3820, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary...
Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation
Exploit Title: Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation Google Dork: N/A Date: 2024-12-26 Exploit Author: Kwangyun Keum Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/blood-bank-donor-management-system/ Version: 2.4 Tested on: Windo...
GO-2025-3595 Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
The vulnerability in the arch/loongarch/mm/mmap.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the arch/loongarch/mm/mmap.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ABB Cylon Aspect 3.08.02 (webServerUpdate.php) - Input Validation Config Poisoning
ABB Cylon Aspect 3.08.02 webServerUpdate.php Input Validation Config Poisoning Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.02 Summary: ASPECT is an award-winning scalable building energ...
PT-2025-22429 · Ооо "Юзергейт" · Usergate Log Analyzer +2
Уязвимость оболочки CLI программного обеспечения межсетевого экрана UserGate Next-Generation Firewall NGFW, единого центра управления UserGate Management Center UGMC и системы сбора логов UserGate Log Analyzer LogAn связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может...
CVE-2024-11679
CVE-2024-11679 describes an input validation weakness in the TpmSetup module for some legacy System x server products. The underlying vulnerability could allow a local attacker with elevated privileges to read the contents of memory, effectively exposing sensitive memory data. The available docum...
CVE-2025-32071
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting XSS from widthheight message via ImageHandler::getDimensionsStringThis issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43...
CVE-2025-32079
The CVE-2025-32079 affects the MediaWiki GrowthExperiments extension for MediaWiki, specifically versions 1.39–1.43, due to improper input validation that can enable HTTP DoS. The issue is documented across multiple feeds (NVD, Red Hat, CIRCL, etc.). No exploitation status is provided in the conn...
CVE-2025-32067 i18n XSS vulnerability in message growthexperiments
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Growth Experiments Extension: from 1.39 through 1.43...
CVE-2025-32069 Wikitext stored XSS on filepages due to dangerous WBMI serialization
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43...
CVE-2025-32071
CVE-2025-32071 affects the Wikimedia Foundation MediaWiki Wikidata Extension (Wikibase/Wikidata). Affects MediaWiki-Wikidata Extension versions 1.39 through 1.43 where improper input validation in ImageHandler::getDimensionsString() enables Cross-Site Scripting (XSS) via the widthheight message. ...
CVE-2025-30294
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access...
CVE-2025-30293
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access...
PT-2025-16135 · Unknown +1 · Wikidata Extension +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Wikidata Extension versions 1.39 through 1.43 Description: The issue is related to improper input validation in the Mediawiki - Wikidata Extension, allowing Cross-Site Scripting XSS from the widthheight message via the...
PT-2025-16137 · Mediawiki · Mediawiki
Name of the Vulnerable Software and Affected Versions: Mediawiki - HTML Tags versions 1.39 through 1.43 Description: The issue is related to improper input validation, allowing Cross-Site Scripting XSS in Mediawiki - HTML Tags. This is due to a lack of proper validation of user input, which can...