Wazuh Manager Inventory Sync Code Execution

The vulnerability of the inventorysync function in the Wazuh Manager’s cluster synchronization component, a platform for security monitoring and threat detection, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow an attacker...

D-Link DWR-M920 Router Sub_41CF20 Function Command Injection

The vulnerability of the sub41CF20 function in the /boafrm/formUSSDSetup file of the D-Link DWR-M920 router’s microprogramming system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject...

TRENDnet TEW-432BRP Form Wipe Command Execution

The vulnerability of the formWlanSetup function in TRENDnet TEW-432BRP router software lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

EDIMAX BR-6478AC Command Injection

The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

D-Link DI-8200G Router Command Execution

The vulnerability of the /upgradefilter.asp file in D-Link DI-8200G router microprogramming software exists due to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

RoundCube Webmail Unauthorized Access

The vulnerability of the RoundCube Webmail email client’s style checking module is related to improper coding or encapsulation of output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AIDE Log Processing

The vulnerability of the AIDE intrusion detection system is related to incorrect processing of output data for log records. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

Log4cxx Confidential Data Access

The vulnerability of the C++ Apache Log4cxx logging framework is related to improper handling of output data for registration logs. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data...

TOTOLINK N150RT Form WSC Code Execution

The vulnerability of the /boafrm/formWsc file of TOTOLINK N150RT microprogrammed software devices is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Video Processing Library Output Injection

The vulnerability of the software tools for accelerated video processing at the hardware level, the Intel Video Processing Library VPL, is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Mozilla Firefox Thunderbird Code Execution

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress plugin wpWax Team 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress wpWax Team 1.2.6 and prior versions, which stems from the program's lack of checksum...

NtFilterToken ParentTokenId Privilege Escalation

The vulnerability of the NtFilterToken ParentTokenId component in Microsoft Windows operating systems is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker to increase their privileges...

Kaspersky Secure Mail Gateway Privilege Escalation

The vulnerability of the Kaspersky Secure Mail Gateway web console relates to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root user privilege...