774 matches found
CVE-2025-12504
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talent Software UNIS allows SQL Injection. This issue affects UNIS: before 42321...
PT-2025-49895
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows SQL Injection.This issue affects Ninja Tables: from n/a through = 5.2.3...
PT-2025-50150
Name of the Vulnerable Software and Affected Versions Microsoft Windows PowerShell versions prior to December 17, 2025 Description The issue is a command injection flaw in Windows PowerShell that allows an unauthorized attacker to execute code locally. The flaw stems from improper neutralization ...
EUVD-2025-199728
Improper neutralization of special elements used in an OS command 'command injection' in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution...
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
The vulnerability of the Apache Tomcat application server arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.
The vulnerability of the Apache Tomcat application server is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2025-38004
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hiecor HieCOR Payment Gateway Plugin hcv4-payment-gateway allows SQL Injection.This issue affects HieCOR Payment Gateway Plugin: from n/a through = 1.5.11...
Aksis Netty ERP SQL注入漏洞
Aksis Netty ERP is an enterprise resource planning software from Aksis Turkey. An SQL injection vulnerability exists in Aksis Netty ERP versions prior to V.1.1000, which stems from improper neutralization of special elements and can lead to SQL injection attacks...
MediaWiki - Springboard Extension 安全漏洞
MediaWiki - Springboard Extension is an open source navigation extension for MediaWiki. A security vulnerability exists in the master version of MediaWiki - Springboard Extension, which stems from improper neutralization of special elements in commands and could lead to a command injection attack...
CVE-2025-47902
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5...
Juniper Networks Junos OS Evolved Operating System Command Injection Vulnerability
Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an operating system command injection vulnerability that stems from improper handling of special elements, which could be exploited by an attacker to cause an OS...
EUVD-2025-34190
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.This issue affects Winsure: through Version dated 21.08.2025...
CVE-2025-0636
EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution...
The vulnerability of the ssh component in the OpenSSH cryptographic security tool allows a hacker to execute arbitrary code.
The vulnerability of the ssh component in the OpenSSH cryptographic protection mechanism is related to improper handling of special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Juniper Networks Junos OS Evolved 操作系统命令注入漏洞
Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an operating system command injection vulnerability that stems from improper handling of special elements, which could be exploited by an attacker to cause an OS...
EUVD-2022-0177
Malicious code in bioql PyPI...