CVE-2026-33387: Improper Neutralization of Special Elements Used in a Template Engine

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...

PT-2025-10104

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description The issue is related to an improper neutralization of CRLF sequences, also known as 'CRLF Injection'. This could allow...

PT-2025-10106

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description An improper neutralization of CRLF sequences, also known as 'CRLF Injection', has been reported. This issue could allo...

CVE-2024-50405: Improper Neutralization of CRLF Sequences

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data. We have already fixed the...

CVE-2024-53693: Improper Neutralization of CRLF Sequences

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the...

CVE-2024-48868: Improper Neutralization of CRLF Sequences

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the vulnerability in the following version...

CVE-2024-48867: Improper Neutralization of CRLF Sequences

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the vulnerability in the following version...

CVE-2024-5276: Improper Input Validation

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

PT-2021-19648

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.3 Description: The issue allows an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allo...

CVE-2021-32068: Allocation of Resources Without Limits or Throttling

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

PT-2021-17108

Name of the Vulnerable Software and Affected Versions Mitel MiContact Center Enterprise versions prior to 9.4 Description The issue is related to insufficient access control in the Enterprise License Manager portal, allowing a user to access restricted files and folders. A successful exploit coul...

PT-2020-19634

Name of the Vulnerable Software and Affected Versions Camstar Enterprise Platform All versions Opcenter Execution Core versions prior to V8.2 Description A vulnerability has been identified that allows an authenticated user to perform an SQL Injection attack by passing a modified SQL query...

CVE-2019-10253

A Cross-Site Request Forgery CSRF vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files. The specific flaw exists within the handling of...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files. The specific flaw exists within the handling of...

CVE-2019-10253: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files. The specific flaw exists within the handling of...