Search Vulnerabilities

SurrealDB before 1.5.5 Query Injection via RPC API

Langroid: handle_message() executes user-supplied tool JSON without sender verification

Apache APISIX: forward auth plugin allows header injection

Nuclio Shell Runtime Command Injection Leading to Privilege Escalation

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

Calculated Fields Form <= 5.2.45 - HTML Injection

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously...

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DH...

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint

A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884)

Configuration leak

A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result...

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resu...

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection