Cadwyn 跨站脚本漏洞

Cadwyn is an API version control application by the individual developer Stanislav Zmiev. A cross-site scripting vulnerability exists in Cadwyn 5.4.3 and earlier versions, which stems from insufficient validation of the /docs endpoint version parameter input and could lead to a reflective...

CVE-2025-53528: Improper Neutralization of Input During Web Page Generation

Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...

The vulnerability of the CloudSrvUserdataVersionCheck() function in TOTOLINK CA600-PoE router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA600-PoE router’s software lies in the lack of measures taken at the control level during the processing of the Version parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending...

CVE-2025-44841

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44841

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44841: Improper Neutralization of Special Elements used in a Command

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

SQL Injection

tech.powerjob, powerjob is vulnerable to SQL injection. The vulnerability is due to improper handling of the version parameter, which allows attackers to manipulate SQL queries...

CVE-2024-44546

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

CVE-2024-44546

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

CVE-2024-44546

PowerJob versions 3.20 and later are vulnerable to an SQL injection security flaw. The root cause is the improper handling of the version parameter , which allows an attacker to manipulate SQL queries. No specific exploit links or information are provided in the documents, and there is currently ...

CVE-2024-44546

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

CVE-2024-44546

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework from PowerJob Open Source that allows developers to easily schedule tasks in their applications. A security vulnerability exists in PowerJob version 3.20 and later, which stems from vulnerability to SQL injection attack...

PT-2024-31171 · Powerjob · Powerjob

Name of the Vulnerable Software and Affected Versions: Powerjob versions 3.20 and later Description: The issue allows for SQL injection via the version parameter. Recommendations: For Powerjob versions 3.20 and later, at the moment, there is no information about a newer version that contains a fi...

CVE-2024-44546: Improper Neutralization of Special Elements used in an SQL Command

Powerjob = 3.20 is vulnerable to SQL injection via the version parameter...

LoLLMs Code Injection Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A code injection vulnerability exists in LoLLMs version 5.9.0, which stems from the presence of a remote code execution vulnerability that allows an attacker to inject arbitrary commands via th...

CVE-2024-30848

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

CVE-2024-30848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

PT-2024-23630 · Silversky · Silversky E-Mail Service

Name of the Vulnerable Software and Affected Versions: SilverSky E-mail service version 5.0.3126 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the version parameter. This could potentially lead to unauthorized actions on the...

CVE-2024-30848

The SilverSky E-mail service version 5.0.3126 is vulnerable to a Cross-site scripting (XSS) flaw. This issue allows remote attackers to inject arbitrary web scripts or HTML through the version parameter , which could potentially lead to unauthorized actions on the affected system. To mitigate thi...