CVE-2026-66881 Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download

Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...

EUVD-2018-9069

Malware in sbrugna...

EUVD-2019-3504

Malware in sbrugna...

RICOH MP C2003 Cross-site Scripting (CVE-2018-17315)

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

PT-2019-15272

Name of the Vulnerable Software and Affected Versions RICOH MP 501 printer affected versions not specified Description A security issue has been found in the RICOH MP 501 printer, specifically in the process of adding addresses. This issue involves HTML Injection and Stored XSS vulnerabilities. T...

Design/Logic Flaw

An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

Design/Logic Flaw

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter...

CVE-2019-11844

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter...

PT-2019-12527

Name of the Vulnerable Software and Affected Versions RICOH SP 4510DN affected versions not specified Description An HTML Injection issue has been found. It affects the /web/entry/en/address/adrsSetUserWizard.cgi API endpoint, specifically the entryNameIn parameter. Recommendations At the moment,...

CVE-2018-17316

On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2018-17315: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

PT-2018-13821

Name of the Vulnerable Software and Affected Versions RICOH SP 4510SF printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter used in th...

PT-2018-1916

Name of the Vulnerable Software and Affected Versions RICOH MP C2003 printer affected versions not specified Description A security issue has been found in the RICOH MP C2003 printer, related to HTML Injection and Stored XSS vulnerabilities. This issue is located in the area of adding addresses v...

PT-2018-1919

Name of the Vulnerable Software and Affected Versions RICOH MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Wizard component, specifically in the /web/entry/en/address/adrsSetUserWizard.cgi file. This allows a...

PT-2018-1920

Name of the Vulnerable Software and Affected Versions RICOH MP C6503 Plus printer affected versions not specified Description A security issue has been found in the RICOH MP C6503 Plus printer related to HTML Injection and Stored XSS vulnerabilities. This issue is associated with adding addresses...

PT-2018-13822

Name of the Vulnerable Software and Affected Versions RICOH MP 2001 printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter when accessi...

PT-2018-1918

Name of the Vulnerable Software and Affected Versions RICOH MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Wizard component, specifically in the /web/entry/en/address/adrsSetUserWizard.cgi file. This allows a...