EUVD-2024-29365

Malicious code in bioql PyPI...

EUVD-2025-24132

Malicious code in bioql PyPI...

CVE-2025-20243 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to improper validation of...

CVE-2025-8661

A stored Cross-Site Scripting vulnerability XSS occurs when the server does not properly validate or encode the data entered by the user...

CVE-2025-8661

CVE-2025-8661 is described as a stored Cross-Site Scripting (XSS) vulnerability in Symantec PGP Encryption 11.0.1, arising from improper validation/encoding of user-supplied data. Per the initial entry, the CVSS 3.1 base score is 6.1 (Medium) with Network attack vector, user interaction required,...

PT-2025-32529

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A stored Cross-Site Scripting XSS vulnerability occurs when the server does not properly validate or encode user-provided data. Recommendations: At the moment, there is no information about a newer...

The vulnerability of the ping tool in the web interface of the microprogramming software for routing and switching platform RUGGEDCOM ROX series, MX (MX5000, MX5000RE) and RX (RX1400, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000), allows a hacker to execute arbitrary code.

The vulnerability of the ping tool in the web interface of the microprogramming software for routing and switching platform RUGGEDCOM ROX models series MX MX5000, MX5000RE and RX RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000 is related to the absence of a mechanism to...

CVE-2019-1076

A Cross-site Scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'...

CVE-2024-52362

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper...

The vulnerability in the genie_bpa.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...

CVE-2024-40721

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path...

PT-2024-28999 · Changing Information Technology · Tcbservisign Windows Version

Name of the Vulnerable Software and Affected Versions: TCBServiSign Windows Version from CHANGING Information Technology affected versions not specified Description: The issue concerns improper validation of server-side input in a specific API. This can be exploited by unauthenticated remote...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to a validation error in the input data received from the web server. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2024-5098 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 HF1 Description: A vulnerability has been identified in SINEMA Remote Connect Server due to missing server-side input sanitation when loading VxLAN configurations. This could allow an...

CVE-2023-51721

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-33991

SAP UI5 Variant Management - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, does not sufficiently encode user-controlled inputs on reading data from the server, resulting in Stored Cross-Site Scripting Stored XSS vulnerability. After successful exploitation, an attacke...

PT-2023-7183

Name of the Vulnerable Software and Affected Versions Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 Description The issue is related to a command injection vulnerability in the NTP server input field. This vulnerability can be triggered by authenticated users via a crafted POST...

CVE-2022-25931 Directory Traversal

All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...

ZTE ZAIP-AIE SQL注入漏洞

ZTE ZAIP-AIE is a product of China's ZTE Corporation ZTE. The ZTE ZAIP-AIE suffers from a security vulnerability that stems from a lack of input validation on the server and a SQL injection vulnerability that allows an attacker to trigger an attack by constructing a malicious request, which in tu...

CVE-2019-11253

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming...