CVE-2022-38357: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/moduleframe/index.php...

CVE-2022-1561

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, bu...

CVE-2022-1561

The CVE-2022-1561 issue concerns Lura and KrakenD-CE before 2.0.2 and KrakenD-EE before 2.0.0 where URL parameters aren’t sanitized, enabling a crafted URL to alter the backend URL defined for a pipe. The vulnerability does not affect KrakenD itself, but the consumed backend may be vulnerable. Re...

CVE-2022-32457

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

CVE-2022-32457

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

Server side request forgery (ssrf)

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

CVE-2022-32457 Data Systems Consulting Co., Ltd. BPM - Blind Server-Side Request Forgery (SSRF)

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

Digiwin BPM 代码问题漏洞

Digiwin BPM is a business process management platform from Taiwan, China-based Digiwin Software Digiwin. A security vulnerability exists in Digiwin BPM, which stems from insufficient filtering of URL parameters, which could allow an unauthenticated, remote attacker to discover the internal networ...

CVE-2022-32457: Server-Side Request Forgery (SSRF)

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

PT-2022-16649 · WordPress · Feed Them Social

Name of the Vulnerable Software and Affected Versions: Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress versions up to, and including 2.9.8.5 Description: The issue allows deserialization of untrusted input via the fts url parameter. This enables unauthenticated attacker...

WordPress plugin Feed Them Social 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Feed Them...

CVE-2022-31208

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmdstring URL parameter...

CVE-2022-31208: Undefined Security Weakness

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmdstring URL parameter...

TOTOLINK T6 FUN_00418540 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the url parameter in the FUN00418540 function not checking its length for input data. A remote attacker can exploit...

CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN00418540...

CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN00418540...

CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN00418540...

Stack overflow

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN00418540...

CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN00418540...

TOTOLINK T6 缓冲区错误漏洞

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the url parameter in the FUN00418540 function not checking its length for input data. A remote attacker can exploit...