68 matches found
The vulnerability of the setVpnAccountCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the setVpnAccountCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitra...
Improper Neutralization of Special Elements Used in a Template Engine
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine in the createtemplate function of the Dashboard API. An attacker can access sensitive information, modify data, or disrupt...
EUVD-2026-5044
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal...
WordPress plugin Tutor LMS Elementor Addons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
Revive Adserver Username In-Blank Neutralization and Improper Vulnerability
Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...
CVE-2025-58961
CVE-2025-58961 is a DOM-based XSS vulnerability in the WordPress CF7 Auto Responder Addon (CF7-autoresponder-addon), affecting versions up to and including 2.4. The issue arises from improper input handling during web page generation, enabling cross-site scripting. Public writeups from CNVD, RH, ...
CVE-2025-49947 WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected XSS.This issue affects WooCommerce Registration Fields Plugin - Custom Signup...
EUVD-2024-35400
Malicious code in bioql PyPI...
EUVD-2024-35071
Malicious code in bioql PyPI...
EUVD-2024-28344
Malicious code in bioql PyPI...
EUVD-2024-25166
Malicious code in bioql PyPI...
EUVD-2025-11666
Malicious code in bioql PyPI...
EUVD-2025-15136
Malicious code in bioql PyPI...
EUVD-2025-9090
Malicious code in bioql PyPI...
EUVD-2025-8199
Malicious code in bioql PyPI...
EUVD-2025-3840
Malicious code in bioql PyPI...
EUVD-2025-3269
Malicious code in bioql PyPI...
EUVD-2025-3377
Malicious code in bioql PyPI...