TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

R7-Officer document editor Code Execution

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

CVE-2024-56115

CVE-2024-56115 Suggested description A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct an Cross-Site Scripting XSS attack. Vulnerability Type CWE-78 | Improper Neutralization of Special Elemen...

CVE-2026-75650

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75650 Write-up: https://abraxaslabs.tech/research/CVE-2026-75650 CVE-2026-75650 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. The client is CVE-2026-75650-Abraxas-Labs.py...

PT-2026-144907

Name of the Vulnerable Software and Affected Versions FortiAuthenticator versions 8.0.0 through 8.0.3 FortiAuthenticator versions 6.6.0 through 6.6.10 Description Improper privilege management allows an authenticated attacker to escalate privileges. Recommendations Update FortiAuthenticator...

PT-2026-144899

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer versions 7.2.0 through 7.2.12 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0...

PT-2026-144896

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer version 7.2 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2026-123020

A security vulnerability exists in eosphoros-ai DB-GPT versions up to 0.8.1 within the Jinja2 Template Handler component. The flaw is located in the FileBasedSkill.get_prompt function of the file packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py. The root cause is the improper ne...

CVE-2026-107264: Drupal Inline Formatter Field: Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field…

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-91915: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script...

CVE-2026-101288

IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Code Injection vulnerability (CVE-2026-101288 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in code. This flaw has a CVSS base score of 8.8 , indicating h...

CVE-2026-101288 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

EUVD-2026-113152

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

PT-2026-132202

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

Security Bulletin: IBM Rational Developer for i is affected by Multiple vulnerabilities

Summary IBM Rational Developer for i is affected by an HTTP request smuggling vulnerability in Jetty-http CVE-2026-19203, two authentication bypass vulnerabilities in sshd-osgi CVE-2026-77185, CVE-2026-93994, two memory exhaustion vulnerabilities in sshd-sftp CVE-2026-94002, CVE-2026-94029, an...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-hardening-ise-XU5EwX5T)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a...

Drupal amazee.ai Private AI Provider SQL injection vulnerability

Drupal amazee.ai Private AI Provider versions prior to 0.0.0 and 1.3.7, as well as versions prior to 1.4.0 and 1.4.3, contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...

Incomplete Filtering of Special Elements

Overview org.apache.camel:camel-mail is a Camel Mail support. Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements via MimeMultipartDataFormat in the camel-mail component. An external sender can supply a multipart message with mail.smtp. or mail.smtps...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers i...