CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

SUSE CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

Takumi Yamada DX Library Remote Code Execution Vulnerability

Takumi Yamada DX Library is an open source library for creating Windows applications. A remote code execution vulnerability exists in Takumi Yamada DX Library's handling of special strings, which could be exploited by a remote attacker to submit a special request to execute arbitrary code...

CVE-2004-1414

Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service application hang via a message that contains many special strings that are converted to images...