CVE-2021-45660

Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y...

CVE-2021-45660

CVE-2021-45660 concerns NETGEAR devices (RBK40/RBR40/RBS40/RBK20/RBR20/RBS20/RBK50/RBR50/RBS50/RBS50Y) affected by a server‑side injection vulnerability present before specific firmware versions (e.g., 2.5.1.16 for most models and 2.6.1.40 for RBS50Y). The connected data provide concrete product ...

CVE-2021-45661

CVE-2021-45661 describes a server-side injection vulnerability in NETGEAR devices across RBK/RBR/RBS families (RBK40/RBR40/RBS40, RBK20/RBR20/RBS20, RBK50/RBR50/RBS50, and RBS50Y) with affected firmware versions prior to 2.5.1.16 (RBS50Y before 2.6.1.40). The issue is documented across multiple s...

CVE-2021-45661

Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y...

Netgear NETGEAR R6400 注入漏洞

The Netgear NETGEAR R6400 is a wireless router from Netgear, Inc. An injection vulnerability exists in NETGEAR R6400 devices prior to version 1.0.1.70, which is affected by server-side injection...

Netgear NETGEAR 注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR devices that are subject to server-side injection. The following products and versions are affecte...

Netgear NETGEAR 注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. An injection vulnerability exists in NETGEAR devices that are subject to server-side injection. The following products and versions are...

NETGEAR 注入漏洞

NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An injection vulnerability exists in NETGEAR devices that are subject to server-side injection. The following products and versions are affected: RBK...

Netgear NETGEAR 注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. An injection vulnerability exists in NETGEAR devices that are subject to server-side injection. The following products and versions are...

Netgear NETGEAR 注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. An injection vulnerability exists in NETGEAR devices that are subject to server-side injection. The following products and versions are...

CVE-2021-24721

The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users being able to inject PHP code into files ending with .php in web accessible locations...

CVE-2021-39115

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a ServerSide Template Injection vulnerability in the Email Template feature. The affected...

CVE-2021-25283

An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks...

Saltstack SaltStack Salt 代码注入漏洞

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A code injection vulnerability exists in SaltStack Salt versions prior to Salt 3002.5 that stems from a failure of t...

vulhub1

It is an offensive tool for web application exploitation. The primary vulnerability targeted is a Server-Side Template Injection SSTI in Flask, as evidenced by the presence of the flask/ssti directory. The tool is likely designed to exploit this vulnerability, allowing an attacker to inject...

CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher...

CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher...

Design/Logic Flaw

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher...

CVE-2020-7111

The CVE-2020-7111 entry concerns Aruba Networks ClearPass Policy Manager. A server-side injection vulnerability could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Affected releases include 6.7.x prior to 6.7.13 and 6.8.x prior to 6.8.4; the fixed versi...

CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher...