CVE-2026-116576

A flaw was found in systeminformation. On Windows systems, the library's input sanitization removes standard quotation marks but fails to filter Unicode quotation marks when constructing PowerShell commands. An attacker who can supply input to an application using this library can exploit this fl...

PT-2026-125124

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString in lib/util.js. On Windows, the sanitizer removes ASCII...

External Tools Module Code Execution

The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment is related to the absence of quotation marks when writing elements or search paths. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created...

PT-2026-49555

Name of the Vulnerable Software and Affected Versions markdown-it affected versions not specified Description A quadratic time complexity issue exists in the smartquotes rule when the typographer: true option is enabled. An attacker can provide markdown input containing a large number of...

Dell EMC NetWorker Code Execution

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the absence of quotation marks in the wording of certain elements or search paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Avast SecureLine VPN Privilege Escalation

The vulnerability of the Avast SecureLine VPN service is related to the absence of quotation marks in the names of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Andrea ST Filters Service Code Issues and Vulnerabilities

Andrea ST Filters Service is an audio enhancement driver component developed by Andrea Corporation in the United States. Version 1.0.64.7 of Andrea ST Filters Service contains a code vulnerability. This vulnerability stems from the service path in the Windows service configuration that lacks...

PT-2025-53453

Name of the Vulnerable Software and Affected Versions Eaton UPS Companion affected versions not specified Description A flaw exists in the Eaton UPS Companion software installer related to improper handling of quotation marks in search paths. This could allow an attacker with file system access t...

NetBak Replicator Backup Software Quota Injection

The vulnerability of NetBak Replicator’s backup software lies in the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability could allow an attacker to gain access to the user account...

Dell Wireless 5932e Wireless Mobile Modem Quotation Mark Code Execution

The vulnerability of the microprogramming software of the Dell Wireless 5932e wireless mobile modem, the embedded Qualcomm Snapdragon X62 chip, and the GNSS/GPS driver is related to the absence of quotation marks in the names of elements or search paths. Exploiting this vulnerability can allow a...

EUVD-2009-5000

Malware in sbrugna...

HikCentral FocSign Privilege Escalation

The vulnerability of the software used for creating, editing, and distributing HikCentral FocSign video content is related to the absence of quotation marks in the wording of certain elements or search paths. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2009-5043

burn allows file names to escape via mishandled quotation marks...

Advisory ROSA-SA-2024-2488

Software: less 458 OS: rosa-server79 packageevrstring: less-458-10.res7 CVE-ID: CVE-2024-32487 BDU-ID: 2024-03717 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the UNIX-like UNIX text terminal utility Less is related to incorrect handling of quotation marks in the filename.c file. Exploitation of...

Grafana Agent Data Visualization Quotation Issue

The vulnerability of the Grafana Agent visualization system is related to the absence of quotation marks in the writing of elements or search paths. Exploiting this vulnerability can allow attackers to increase their privileges...

Grafana Alloy Privilege Escalation

The vulnerability of the Grafana Alloy data visualization system is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

Setup/Deployment Privilege Escalation

The vulnerability of the Setup/Deployment component of the Windows operating system is related to the absence of quotation marks in the syntax of certain elements or search paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

Hitachi Device Manager Quotation Injection

The vulnerability of the Hitachi Device Manager storage management system is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

FTRA Installation Package Code Execution

The vulnerability of the installation package of the FTRA software for remote access to Rockwell Automation’s FactoryTalk Remote Access systems is related to the absence of quotation marks in the syntax of certain elements or search paths. Exploiting this vulnerability could allow an attacker to...

ROS-20240516-01

Vulnerability of Less, a utility for UNIX-like text terminals, is related to incorrect processing of quotation marks in filename.c file. quotes in the filename.c file. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...