CVE-2024-40114

A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...

Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions, which stems from a mishandling of a language cookie that could result in local file...

Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions that stems from the use of default credentials...

Planet FW-WGS-804HPT web_sys_infoContact_post Function Buffer Overflow Vulnerability

Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the websysinfoContactpost function failing to correctly validate the length of the input data, which can be exploited by an attacker ...

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

CVE-2024-30617

A Cross-Site Request Forgery CSRF vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge...

CVE-2022-3789

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument postid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2021-40214

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component...

CVE-2019-10376

A reflected cross-site scripting vulnerability in Jenkins Wall Display Plugin 0.6.34 and earlier allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin...

SUSE-SU-2025:01638-1 Security update for openssh

This update for openssh fixes the following issue: Security fixes: - CVE-2025-32728: Fixed logic error in DisableForwarding option bsc1241012 Other fixes: - Fix ssh client segfault with GSSAPIKeyExchange=yes in sshkex2 due to gssapi proposal not being correctly initialized bsc1236826. The problem...

PLANET FW-WGS-804HPT 安全漏洞

PLANET FW-WGS-804HPT is a wall-mounted managed switch from PLANET China. A security vulnerability exists in PLANET FW-WGS-804HPT v1.305b241111, which originates from a stack overflow of the ownkey parameter in the webrmonalarmpostrmonalarm function...

PLANET FW-WGS-804HPT 安全漏洞

Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the failure of the radIpkey parameter in the webradiusSrvpost function to correctly validate the length of the input data, which can ...

Breaking the Prompt Wall (I): a Real-World Case Study of Attacking ChatGPT Via Lightweight Prompt Injection

Whitepaper called Breaking The Prompt Wall I: A Real-World Case Study Of Attacking ChatGPT Via Lightweight Prompt Injection...

CVE-2025-30869

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Reflected XSS.This issue affects Image Wall: from n/a through = 3.0...

CVE-2025-30869

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Reflected XSS.This issue affects Image Wall: from n/a through = 3.0...

CVE-2025-30869

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Reflected XSS.This issue affects Image Wall: from n/a through = 3.0...

CVE-2025-30869 WordPress Image Wall plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Reflected XSS.This issue affects Image Wall: from n/a through = 3.0...

CVE-2025-30869

CVE-2025-30869 is a Reflected XSS in the Image Wall WordPress plugin. Affected software: Image Wall (WordPress) up to version 3.0. Root cause: improper neutralization of input during web-page generation. Impact per the CVSS: high likelihood of client-side script execution with Confidentiality, In...

CVE-2025-30869 WordPress Image Wall plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall image-wall allows Reflected XSS.This issue affects Image Wall: from n/a through = 3.0...

PT-2025-14058 · Unknown · Parakoos Image Wall

Name of the Vulnerable Software and Affected Versions: Parakoos Image Wall versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For Parakoos Image...