WebdriverIO Framework Code Execution

The vulnerability of the WebdriverIO framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OpenClaw extensions/lobster/src/lobster-tool.ts Arbitrary Command Execution

The vulnerability in the extensions/lobster/src/lobster-tool.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

Zyxel Network Device Code Execution

The vulnerability of Zyxel network device microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microprogrammed Software Code Execution

The vulnerability of the microprogrammed software in network video recorders Digiever DS is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TrueConf Server Command Execution DoS

The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and cause service failures...

miniIGD Component Code Execution

The vulnerability of the miniIGD component in the SOAP microprogramming system of the WRH-733GBK and WRH-733GWH routers is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dell Unity OE Privilege Escalation Command Execution

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

EMACS Arbitrary Command Execution

The vulnerability of the EMACS text editor exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Siemens Scalance LPE9403 LPE

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CocoaPods Code Execution

The vulnerability of dependency managers for Swift and Objective-C CocoaPods exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Node.js OpenVPN Connect Code Execution

The vulnerability of the Node.js software product OpenVPN Connect relates to the lack of measures to neutralize instructions in the dynamically executed code. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

FontForge Command Injection

The vulnerability of the FontForge font editing software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Tuleap lifecycle management system

The vulnerability of the Tuleap application lifecycle management system exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely and with administrative privileges, to temporarily disable a user accou...

Twig Template Compiler Template Injection

The vulnerability of the Twig template compiler exists because measures to neutralize special elements are not taken. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by executing certain PHP...

Apache SpamAssassin Confidential Data Access

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

Command injection when using external SMB storage - ownCloud

The external legacy SMB storage not using php-libsmbclient of ownCloud was not properly neutralizing all special elements which allows an adversary to execute arbitrary SMB commands. Effectively this allows an attacker to gain access to any file on the system or overwrite it, potentially leading ...