CVE-2024-7679

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

CVE-2024-23828 Nginx-UI authenticated RCE through injecting into the application config via CRLF

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of testconfigcmd or startcmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This...

CVE-2022-36446

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command...

CVE-2022-36446

CVE-2022-36446 : Webmin versions before 1.997 are vulnerable to an authenticated remote code execution via software/apt-lib.pl which fails to HTML-escape a UI command, enabling an OS command injection when updating packages. Exploitation requires access to the Software Package Updates module and ...

PT-2021-27353

Name of the Vulnerable Software and Affected Versions: fossil versions prior to 2.16 Description: The issue concerns improvements and fixes in various versions of fossil, including updates to the web UI, improvements to the fossil ui command, and enhancements to wiki features. There are no specif...

PT-2021-27354

Name of the Vulnerable Software and Affected Versions: fossil versions prior to 2.16 Description: The issue concerns improvements and fixes in various versions of fossil, including updates to the web UI, improvements to the fossil ui command, and fixes for client-side TLS verification. There is n...