The vulnerability of the command-line interface of ArubaOS allows a attacker to execute arbitrary operating system commands.

The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

AsKoc Energy Web Report System SQL注入漏洞

AsKoc Energy Web Report System is a website of AsKoc Inc. A security vulnerability exists in AsKoc Energy Web Report System versions prior to 23.03.10 that stems from an improper neutralization of a particular element used and a SQL injection vulnerability...

USN-5904-2 sox regression

USN-5904-1 fixed vulnerabilities in SoX. It was discovered that the fix for CVE-2021-33844 was incomplete. This update fixes the problem. Original advisory details: Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...

USN-5806-3 ruby2.7 vulnerability

USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use th...

CVE-2021-36821

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPMU DEV Forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.14.11...

USN-5952-1: OpenJPEG vulnerabilities

Sebastian Poeplau discovered that OpenJPEG incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affecte...

Talent Software UNIS 跨站脚本漏洞

Talent Software UNIS is an automated system from Talent Software that records and monitors all activities performed by university academic staff and analyzes academic performance by academic staff and units. A security vulnerability exists in Talent Software UNIS prior to version 28376 that stems...

CVE-2022-23790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting XSS.This issue affects Customer Relation Manager: before 2022.03.13...

CVE-2021-4195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firmanet Software and Technology Customer Relation Manager allows XSS Targeting HTML Attributes.This issue affects Customer Relation Manager: before 2022.03.13...

CVE-2022-47171

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...

SAP NetWeaver 跨站脚本漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP Germany. The platform mainly provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver, which stems from insufficient coding of user input an...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter input resulting in sql injecti...

Alpata Licensed Warehousing Automation System SQL注入漏洞

Alpata Licensed Warehousing Automation System is a licensed warehouse automation system from Alpata Corporation. A security vulnerability exists in the Alpata Licensed Warehousing Automation System that stems from poor handling of user input data prior to splicing SQL statements, which could lead...

Saysis Starcities SQL注入漏洞

Saysis Starcities is an application from Saysis, Inc. A security vulnerability exists in Saysis Starcities that stems from imperfect handling of user input data prior to splicing SQL statements, which could lead to an SQL injection vulnerability...

GHSA-XM67-587Q-R2VW wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

Impact Wasmtime's code generation backend, Cranelift, has a bug on x8664 platforms for the WebAssembly i8x16.select instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one...

CVE-2023-22889

SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users...

USN-5922-1 fribidi vulnerabilities

It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. CVE-2022-25308 It was discovered that...

CVE-2022-2178

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saysis Computer Starcities allows Cross-Site Scripting XSS.This issue affects Starcities: before 1.1...

PT-2023-12670 · Saysis Computer · Starcities

Name of the Vulnerable Software and Affected Versions: Starcities versions prior to 1.1 Description: The issue affects Saysis Computer Starcities, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious...

The vulnerability of Zyxel 5G NR/4G LTE CPE router’s micro-programming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.

The vulnerability of Zyxel 5G NR/4G LTE CPE routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a speciall...