The vulnerability of the _all_edits.php (/_parse/_all_edits.php) script in the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the alledits.php /parse/alledits.php script in the Job Recruitment system relates to the failure to neutralize special elements during the processing of the skillset parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acces...

CVE-2024-47919 Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-56115

CVE-2024-56115 affects Amiro.CMS prior to 7.8.4. The issue arises from failure to neutralize special elements, enabling cross-site scripting (XSS). Impact is driven by the ability for remote attackers to exploit XSS; CVSSv3.1 base score 6.1 (MEDIUM) with network attack vector, no privileges, user...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

PT-2024-24181 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to 0.6.3 Description: The issue is related to improper neutralization of special elements via the meta set function in librz/analysis/meta. This occurs due to the improper handling of special elements. Recommendations: Fo...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

The vulnerability of the microprogrammed routing software of I-O Data Device UD-LT1 and UD-LT1/EX exists due to the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the I-O Data Device UD-LT1 and UD-LT1/EX router microprogramming systems exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-54292

CVE-2024-54292 affects the WordPress Appsplate plugin

WordPress plugin Revy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Eryaz NatraCar B2B Dealer Management Program 安全漏洞

Eryaz NatraCar B2B Dealer Management Program is a dealer management system from Eryaz. A security vulnerability exists in Eryaz NatraCar B2B Dealer Management Program that stems from improper use of special elements in SQL commands, resulting in a SQL injection vulnerability...

The vulnerability of the QuTS operating systems and QTS network devices from Qnap arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the QuTS operating systems and QTS network devices involves the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the IBM Security Verify Access access control system lies in its lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of the IBM Security Verify Access access control system lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Dell Enterprise SONiC operating systems lies in the lack of measures to neutralize special elements used in the operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of Dell Enterprise SONiC operating systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the wordexp() function in the tinygltf library, a programming language, allows attackers to execute arbitrary code.

The vulnerability of the wordexp function in the tinygltf programming language library is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted commands...

The vulnerability in the set of development libraries for Intel Distribution for GDB relates to incorrect elimination of special elements in output data, allowing an attacker to trigger a service failure.

The vulnerability in the application development library set of Intel Distribution for GDB is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-50373

CVE-2024-50373 affects Advantech EKI-6333AC-2G (≤1.6.3), EKI-6333AC-2GD (≤1.6.3) and EKI-6333AC-1GPO (≤1.2.1). The root cause is improper neutralization of special elements in OS commands during the restore_config_from_utility operation in the edgserver service, enabling remote unauthenticated at...

CVE-2024-50367

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The source of the vulnerability relies on...

The vulnerability of the CLI command-line interface of the GitHub collaborative development platform, related to the failure to remove special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the CLI command-line interface of the GitHub collaborative development platform is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the QuRouter operating system for QNAP network devices lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability of the QuRouter operating system for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...