Eugene Lim

يحتوي أحد أوامر وحدة التحكم المخفية على ثغرة في حقن الأوامر تحدث عند تمرير أحرف التحكم إلى الحجة الثانية من هذا الأمر. تكمن هذه المشكلة في الطريقة التي يتم بها تمرير أمر وحدة التحكم إلى الدالة `popen()`. يمكن للمهاجمين المصادق عليهم الذين يتمتعون بإمكانية الوصول إلى وحدة التحكم عبر SSH استغلال هذه الثغرة لتنفيذ أوامر نظام التشغيل الأساسي.

The issue is related to a Denial of Service (DoS) due to an out-of-bounds read involving `section->num pages` in the `decode r2007.c` file. This can cause the software to become unresponsive or crash.

An OS command injection issue exists in the httpd iperfrun.cgi functionality. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this issue.

The issue is related to Cross-site Scripting (XSS) via embedded links in whiteboard objects due to improper input sanitization. This allows a remote attacker to conduct an XSS attack using a specially crafted link. The vulnerability affects users of the npm package @excalidraw/excalidraw, particularly in environments where untrusted user input in drawings is shared with third parties.

A carefully crafted request on several JSPWiki plugins could trigger an issue that allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

The issue is related to Cross-site Scripting (XSS) where the `SetClipboardText` API does not properly escape the ` character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via the `emscripten run script` function. This vulnerability is present only when compiling raylib for PLATFORM WEB, and all other Desktop/Mobile/Embedded platforms are not affected.

The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This vulnerability may allow authorized users to exploit it for limited impact on components.

The issue is related to the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a `memcpy()` call. This can lead to a denial of service.

The issue is related to a buffer overflow in the DHCPv6 packet parsing code, which could be exploited by a remote attacker to craft a packet that causes an out-of-bounds memory write, leading to a crash of the dhcp6relay process. This process is critical and its failure could cause the dhcp relay docker to shut down.

The issue affects the ion-parser package, where an attacker can submit a malicious INI file to an application that uses the `parse` function, leading to prototype pollution on the application. This can be further exploited depending on the context.

The issue arises when an attacker submits a malicious INI file to an application that uses the `parse` function to parse it. This can lead to prototype pollution on the application, which can be further exploited depending on the context.

The issue arises when an attacker submits a malicious INI file to an application that parses it with decode, resulting in prototype pollution on the application. This can be exploited further depending on the context.

The issue concerns a prototype pollution vulnerability. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation are not provided.

The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors due to improper neutralization of input during web page generation. This can be exploited for Cross-site Scripting attacks.

The issue is related to a memory corruption vulnerability in the telnet input char function. This vulnerability occurs because user input cmdline len is copied into a fixed buffer b->buf without any bound checks. As a result, if the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.

The issue arises from a buffer overflow vulnerability in the `rad packet recv` function, located in `opt/src/accel-pppd/radius/packet.c`. This vulnerability occurs because user input `len` is copied into a fixed buffer `&attr->val.integer` without any bound checks. When a client connects to the server and sends a large radius packet, this buffer overflow vulnerability can be triggered.

The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection, in the Log Management functionality. This allows remote attackers to inject SQL commands via unspecified vectors.

The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection, in the Security Management functionality. This allows remote attackers to inject SQL commands via unspecified vectors.

The issue is related to an unsigned integer underflow flaw inside the tcp transport. To exploit this, a user would have to actively connect to a malicious device that could send a response with invalid content. The probability of this being exploited is currently considered minimal, but this could change in the future, especially with industrial networks growing together.

Name of the Vulnerable Software and Affected Versions: Scalabium dBase Viewer version 2.6 (Build 5.751) Description: The issue allows for remote code execution via a crafted DBF file, which triggers a buffer overflow. An attacker can utilize the Structured Exception Handler (SEH) records to redirect execution to attacker-controlled code. Recommendations: For Scalabium dBase Viewer version 2.6 (Build 5.751), consider avoiding the use of crafted DBF files until a patch is available. As a temporary workaround, restrict the opening of DBF files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.