Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞

The Advantech EKI-6333AC-2G and Advantech EKI-6333AC-2GD are both industrial-grade wireless access points APs from Advantech, China. A security vulnerability exists in the Advantech EKI-6333AC-2G version 1.6.3 and earlier, EKI-6333AC-2GD version v1.6.3 and earlier, and EKI-6333AC-1GPO version...

Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞

The Advantech EKI-6333AC-2G and Advantech EKI-6333AC-2GD are both industrial-grade wireless access points APs from Advantech, China. A security vulnerability exists in the Advantech EKI-6333AC-2G version 1.6.3 and earlier, EKI-6333AC-2GD version v1.6.3 and earlier, and EKI-6333AC-1GPO version...

CVE-2024-11665 Unauthenticated Remote Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in hardy-barth cph2echargefirmware allows OS Command Injection.This issue affects cph2echargefirmware: through 2.0.4...

CVE-2024-11665 Unauthenticated Remote Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in hardy-barth cph2echargefirmware allows OS Command Injection.This issue affects cph2echargefirmware: through 2.0.4...

CVE-2024-7882

CVE-2024-7882 describes an SQL Injection in Special Minds Design and Software e-Commerce due to improper neutralization of special elements in SQL commands. Affected are versions prior to 22.11.2024. The linked documents state that validation/sanitization of inputs is needed and patching prior to...

The vulnerability of the MediaCMS content management system lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary operating system commands, gain control over resources, and penetrate the internal network.

The vulnerability of the MediaCMS content management system is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands remotely, gain...

CVE-2024-7130 Reflected XSS in Kion Computer's KION Exchange Programs Software

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS. This issue affects KION Exchange Programs Software: before 1.21.9092.29966...

CVE-2024-7016 Stored XSS in Smarttek Informatics' Smart Doctor

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges. This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosu...

CVE-2024-52471

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in petesheppard84 Extensions for Elementor allows Reflected XSS.This issue affects Extensions for Elementor: from n/a through 2.0.37...

CVE-2024-52470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

CVE-2024-52473

CVE-2024-52473 affects the WordPress plugin HTML5 Lyrics Karaoke Player (versions ≤ 2.4). Root cause is improper input neutralization during web page generation, enabling Reflected XSS. Exploitation details are not specified in the provided documents; no patch/version fix is publicly documented. ...

CVE-2024-11406

The CVE-2024-11406 issue affects django CMS Attributes Field (before 4.0). The vulnerability is a Stored XSS in the Django CMS Attributes Fields, caused by improper input neutralization during web page generation in the admin/admin-related handling of Attributes fields. Impact is stored XSS, with...

CVE-2024-11406 Stored XSS in django CMS Attributes Fields

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS. This issue affects django CMS Attributes Fields: before 4.0...

PT-2024-35313 · Unknown · Html5 Lyrics Karaoke Player

Name of the Vulnerable Software and Affected Versions: HTML5 Lyrics Karaoke Player versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

django CMS 跨站脚本漏洞

django CMS is django CMS open source an open source enterprise content management system based on the django framework. A cross-site scripting vulnerability exists in django CMS versions prior to 4.0, which stems from improper input neutralization during page generation...

CVE-2023-27609

CVE-2023-27609 : WordPress plugin WP Roles at Registration (

CVE-2024-51935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

CVE-2024-51928

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakir Hasan Blocks Post Grid blocks-post-grid allows DOM-Based XSS.This issue affects Blocks Post Grid: from n/a through = 1.0.3...

CVE-2024-51911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

CVE-2024-51908

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kevinabl Adventure Bucket List adventure-bucket-list allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through = 1.0.9...