CVE Vulnerability Catalog

Wtyczki Mattermost Plugin Legal Hold w wersjach <=1.1.4 nie zatrzymują przetwarzania żądań po nieudanej weryfikacji autoryzacji w funkcji ServeHTTP. To pozwala uwierzytelnionemu atakującemu na dostęp, tworzenie, pobieranie i usuwanie danych dotyczących zatrzymania prawnego za pomocą spreparowanych żądań API do punktów końcowych wtyczki.

W systemie Simple Laundry System 1.0 odkryto lukę, która dotyczy nieznanego kodu w pliku /userfinishregister.php komponentu Parameter Handler. Manipulacja argumentem firstName prowadzi do wstrzykiwania SQL.

W projekcie Easy Blog Site 1.0 wykryto podatność bezpieczeństwa, która dotyczy nieznanej funkcjonalności pliku login.php. Manipulacja argumentami username/password prowadzi do ataku typu SQL injection, który może być inicjowany zdalnie.

Zidentyfikowano słabość w systemie wynajmu samochodów projectworlds w wersji 1.0. Wrażliwa jest nieznana funkcjonalność pliku /pay.php w komponencie Parameter Handler, która może prowadzić do ataku typu SQL injection poprzez manipulację argumentem mpesa.

W systemie zarządzania studentami Cyber-III zidentyfikowano podatność, która dotyczy nieznanej funkcji pliku /viva/update.php w komponencie obsługi żądań HTTP POST. Manipulacja argumentem 'Name' prowadzi do niewłaściwej autoryzacji, co umożliwia zdalne przeprowadzenie ataku.

W systemie wynajmu samochodów projectworlds w wersji 1.0 wykryto podatność, która dotyczy nieznanego kodu w pliku /message_admin.php komponentu Parameter Handler. Manipulacja argumentem Message prowadzi do wstrzykiwania SQL.

projectworlds Car Rental Project 1.0 has a SQL injection vulnerability in /book_car.php via the fname argument. The attack can be launched remotely and the exploit is publicly available.

Vulnerability in gpt-researcher up to version 3.4.3 in the ws Endpoint component. Manipulation of the source_urls argument can lead to server-side request forgery (SSRF). The attack is remote and the exploit has been publicly disclosed.

In the Linux kernel, the ksmbd module has a vulnerability where the conn->binding flag is not cleared after a failed multichannel session binding request. This leaves the connection in a binding state, causing all subsequent ksmbd_session_lookup_all() calls to fall back to the global sessions table, potentially leading to authorization errors.

In the Linux kernel, the Bluetooth SCO subsystem has a use-after-free vulnerability in sco_recv_frame(). The function reads conn->sk under sco_conn_lock() but releases the lock without holding a socket reference, allowing a concurrent close() to free the socket before accessing sk->sk_state.

In the Linux kernel, missing netlink attribute validation in netfilter conntrack for SCTP and ctnetlink. An attacker can cause an out-of-bounds read (slab-out-of-bounds) by supplying an invalid SCTP state or direction value.

In the Linux kernel, a vulnerability exists in xfrm_nat_keepalive_net_fini() where after canceling delayed work, xfrm_state_fini() can reschedule nat_keepalive_work. This leads to a race condition where the work may execute on already freed network structure, potentially causing use-after-free.

In gpt-researcher up to version 3.4.3, a missing authentication vulnerability was found in an unknown function of the HTTP REST API endpoint. The attack can be performed remotely and the exploit has been made public. The project was informed but has not responded.

Vulnerability in gpt-researcher up to version 3.4.3. The extract_command_data function in backend/server/server_utils.py in the WebSocket component allows remote code injection via manipulation of the args argument. The exploit has been publicly disclosed.

The Belkin F9K1015 router version 1.00.10 has a stack-based buffer overflow in the formSetFirewall function of /goform/formSetFirewall. Manipulation of the webpage argument allows remote exploitation. The vendor did not respond.

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This vulnerability affects the function formSetSystemSettings in the file /goform/formSetSystemSettings, where manipulation of the webpage argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed. The vendor did not respond.

In JeecgBoot 3.9.0/3.9.1, a missing authentication vulnerability was found in the AI Chat module in file JeecgBizToolsProvider.java. The attack can be performed remotely. A patch is available in the repository but not yet included in an official release.

The Belkin F9K1015 router version 1.00.10 has a stack-based buffer overflow in the formSetPassword function of /goform/formSetPassword. Manipulation of the webpage argument allows remote exploitation. The vendor did not respond.

A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formReboot function of the /goform/formReboot file. The attack can be performed remotely by manipulating the webpage argument. The exploit is publicly available.

A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWlEncrypt function of the /goform/formWlEncrypt file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.