3807 matches found
GHSA-CHJ7-W3F6-CVFJ Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...
Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...
Input validation
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
Cross site scripting
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-52069
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-52069: Improper Neutralization of Input During Web Page Generation
kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...
CVE-2023-51724: Improper Neutralization of Input During Web Page Generation
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...
CVE-2023-52069
CVE-2023-52069 affects kodbox v1.49.04, which is reported to contain a cross-site scripting (XSS) vulnerability via a URL parameter. The CVSS v3.1 base score is 5.4 (Medium), with attack vector NETWORK, attack complexity LOW, privileges required LOW, user interaction REQUIRED, and a Changed scope...
PT-2024-15716 · Zhihuiyun · Zhihuiyun
Name of the Vulnerable Software and Affected Versions: ZhiHuiYun versions up to 4.4.13 Description: A critical issue affects the function download network image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side...
ZhiHuiYun Code Issue Vulnerability
ZhiHuiYun is a smart campus solution from ZhiHuiYun. ZhiHuiYun 4.4.13 and earlier versions have a code issue vulnerability that stems from a server-side request forgery SSRF vulnerability in the parameter url of the downloadnetworkimage function in /app/Http/Controllers/ImageController.php...
PT-2024-14383
Name of the Vulnerable Software and Affected Versions kodbox version 1.49.04 Description A cross-site scripting XSS issue was discovered in kodbox via the URL parameter. This allows for potential malicious script injection and execution. Recommendations For kodbox version 1.49.04, as a temporary...
Cassia X1000 Code Execution
The vulnerability of the corporate Bluetooth gateway Cassia X1000 is related to the lack of measures taken to secure data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges using the queueUrl parameter in /bypass/conf...
PT-2024-15637 · Unknown · Cxbsoft Url-Shorting
Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue affects some unknown functionality of the file index.php. The manipulation of the url argument leads to sql injection. The exploit has been disclosed to the public. The...
Cassia Networks Gateway Security Vulnerability
Cassia Networks Gateway is an IoT gateway from Cassia Networks. A security vulnerability exists in Cassia Networks Gateway versions XC10002.1.1.2303082218, XC20002.1.1.2303090947, which stems from an uncleared queueUrl parameter in /bypass/config...
PT-2024-15459 · Inis · Inis
Name of the Vulnerable Software and Affected Versions: Inis versions up to 2.0.1 Description: A critical issue affects some unknown processing of the file app/api/controller/default/Proxy.php. The manipulation of the argument p url leads to server-side request forgery. The attack may be initiated...
PT-2024-15455 · Youke365 · Youke365
Name of the Vulnerable Software and Affected Versions: Youke365 versions up to 1.5.3 Description: A critical issue has been found in Youke365, affecting an unknown functionality of the file /app/api/controller/collect.php. The manipulation of the url argument leads to server-side request forgery...
PT-2024-15454 · Youke365 · Youke365
Name of the Vulnerable Software and Affected Versions: Youke365 versions up to 1.5.3 Description: A critical issue was found in the Parameter Handler component, specifically in the file /app/api/controller/caiji.php. The manipulation of the url argument leads to server-side request forgery,...