The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created arguments...

The vulnerability of D-Link DCS-930L Wi-Fi cameras lies in the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows intruders to execute arbitrary commands.

The vulnerability of D-Link DCS series Wi-Fi cameras exists due to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-16379

Name of the Vulnerable Software and Affected Versions ASOS Information Technologies Book Cites versions prior to 23.01.05 Description The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS. This means an attacker could potentiall...

ASOS Book Cites 跨站脚本漏洞

ASOS Book Cites is a website. A security vulnerability exists in ASOS Book Cites versions prior to 23.01.05 that stems from improper neutralization of user input. An attacker could exploit the vulnerability to conduct a cross-site scripting attack...

ASOS SOBIAD 跨站脚本漏洞

ASOS SOBIAD is a website. A security vulnerability exists in ASOS SOBIAD prior to version 23.02.01, which stems from improper neutralization of user input. An attacker could exploit the vulnerability to conduct a cross-site scripting attack...

USN-5905-1 php7.0 vulnerabilities

It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of service. CVE-2022-31628 It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to compromise data integrity...

USN-5904-1 sox vulnerabilities

Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ES...

Glox Technology Useroam Hotspot SQL注入漏洞

Glox Technology Useroam Hotspot is a hotspot system from Glox Technology. Glox Technology Useroam Hotspot suffers from a SQL injection vulnerability that stems from an unsatisfactory neutralization of the particular element used, resulting in SQL injection...

jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method

A Cross-site scripting XSS vulnerability exists in JQuery. This flaw allows an attacker with the ability to supply input to the ‘HTML’ function to inject Javascript into the page where that input is rendered, and have it delivered by the browser...

WordPress plugin GN Publisher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-1914 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands on the underlying...

OpenCats 跨站脚本漏洞

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in OpenCats version 0.9.6 that stems from improper input neutralization and can be exploited by an attacker to steal...

USN-5888-1 python3.9 vulnerabilities

It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. CVE-2015-20107 Hamza Avvan discovered that Python incorrectly...

Crafter CMS SQL注入漏洞

Crafter CMS is an open source content management system CMS for digital experience applications. Crafter CMS suffers from a security vulnerability that stems from an improper neutralization of a particular element used, resulting in a SQL injection vulnerability...

CVE-2022-41334

An improper neutralization of input during web page generation CWE-79 vulnerability in FortiOS versions 7.0.0 to 7.0.7 and 7.2.0 to 7.2.3 may allow a remote, unauthenticated attacker to launch a cross site scripting XSS attack via the "redir" parameter of the URL seen when the "Sign in with...

Fortinet FortiNAC 跨站脚本漏洞

Fortinet FortiNAC is a zero-trust access solution from Fortinet. A security vulnerability exists in Fortinet FortiNAC portal UI versions prior to 9.4.1, which stems from improper neutralization of user input. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...

Fortinet FortiOS 跨站脚本漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists ...

SUSE CVE-2007-5728

Cross-site scripting XSS vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHPSELF in 1 redirect.php, possibly related to 2 login.php, different vectors than CVE-2007-2865...

SUSE CVE-2012-5136

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document...

SUSE CVE-2012-6708

jQuery before 1.9.0 is vulnerable to Cross-site Scripting XSS attacks. The jQuerystrInput function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '' character anywhere in the string, giving...