50 matches found
EUVD-2020-17301
Malware in sbrugna...
EUVD-2019-11037
Malware in sbrugna...
EUVD-2020-23750
Malware in sbrugna...
EUVD-2022-7048
Malicious code in bioql PyPI...
CVE-2025-35431
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1...
ROS-20240503-19
A vulnerability in the Apache Maven framework is related to the generation of double-quoted strings without proper escaping. Exploitation of the vulnerability could allow an attacker acting remotely to conduct a shell-based attack. shell attacks...
[SECURITY] Fedora 40 Update: apache-commons-text-1.10.0-6.fc40
The Commons Text library provides additions to the standard JDK's text handli ng. Our goal is to provide a consistent set of tools for processing text generally from computing distances between Strings to being able to efficiently do Stri ng escaping of various types...
USN-6233-1 yajl vulnerabilities
It was discovered that YAJL was not properly performing bounds checks when decoding a string with escape sequences. If a user or automated system using YAJL were tricked into processing specially crafted input, an attacker could possibly use this issue to cause a denial of service application...
CVE-2022-42466 XSS vulnerability, eg for String properties.
Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release,...
Exploit for Cross-site Scripting in Gitea
CVE-2021-28378 Details about this CVE herehttps://www.cved...
CVE-2020-36172
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS...
PT-2021-11952
Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields plugin version 5.8.11 and earlier Description: The issue is related to the mishandling of string escaping in Select2 dropdowns, potentially leading to cross-site scripting XSS. XSS is a type of attack where an attacker...
CVE-2020-24582: Improper Neutralization of Input During Web Page Generation
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface...
PT-2020-15750
Name of the Vulnerable Software and Affected Versions Zulip Desktop versions prior to 5.4.3 Description The issue arises from mishandled string escaping during the composition of HTML for the user interface, leading to a potential XSS attack. Recommendations For versions prior to 5.4.3, update to...
CVE-2019-20493
cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled SEC-520...
CVE-2019-20493: Improper Neutralization of Input During Web Page Generation
cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled SEC-520...
PT-2020-10475
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.18 Description The issue is related to self-XSS due to mishandled JSON string escaping. Recommendations For versions prior to 82.0.18, update to version 82.0.18 or later to resolve the issue...
PT-2019-12240
Name of the Vulnerable Software and Affected Versions Symfony versions prior to 4.2.12 Symfony versions 4.3.x prior to 4.3.8 Description An issue in the VarExport component of Symfony allows specially crafted strings to escalate to the execution of arbitrary PHP code due to incorrect string...
CVE-2019-11325: Fix escaping of strings in VarExporter
Affected versions Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7 versions of the Symfony VarExporter component are affected by this security issue. The issue has been fixed in Symfony 4.2.12 and 4.3.8. Description Some strings were not properly escaped when being dumped by the VarExporter component...
