CVE Vulnerability Catalog

RealTerm Serial Terminal 2.0.0.70 contains a SEH buffer overflow vulnerability in the Echo Port tab. A local attacker can supply a malicious payload that, when pasted into the Port field and the Change button is clicked, triggers arbitrary code execution.

C4G Basic Laboratory Information System 3.4 has multiple SQL injection vulnerabilities in the users_select.php endpoint via the site parameter. Unauthenticated attackers can send crafted GET requests to execute arbitrary SQL and extract patient records and credentials.

Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters. Attackers can inject script tags through the cateid parameter in categorysearch.php or SQL code through the view parameter in list-details.php to execute arbitrary code or extract database information.

eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by injecting SQL code into parameters. Attackers can exploit the 'key' parameter in the login endpoint to authenticate as administrator and then read arbitrary PHP files.

CMSsite 1.0 contains an SQL injection vulnerability in the 'post' parameter, allowing unauthenticated attackers to manipulate database queries. The attack can be performed remotely via GET requests to post.php, leading to data leakage or time-based blind SQL injection attacks.

UniSharp Laravel File Manager versions v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability, allowing authenticated attackers to upload malicious files (e.g., PHP) via the upload endpoint. Attackers can achieve remote code execution by accessing the uploaded file.

PilusCart 1.4.1 contains a SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the 'send' parameter. Attackers can send POST requests to the comment endpoint with RLIKE-based boolean SQL injection payloads to extract sensitive database information.

VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with a malicious payload in the mtu_eth0 field to execute commands as the apache user.

A structured exception handler buffer overflow in River Past Video Cleaner 7.6.3 allows local attackers to execute arbitrary code by supplying a malicious string in the Lame_enc.dll field. Attackers can craft a payload with 280 bytes of padding, SEH override, and shellcode.

qdPM 9.1 is vulnerable to SQL injection via the search_by_extrafields[] parameter. An attacker can manipulate database queries by sending crafted POST requests to the users endpoint, leading to data exfiltration.

News Website Script 2.0.5 has an SQL injection vulnerability in the news ID parameter, allowing unauthenticated attackers to manipulate database queries. Attackers can send GET requests to index.php/show/news/ with malicious SQL to extract sensitive data.

SuiteCRM 7.10.7 has a time-based SQL injection vulnerability in the record parameter of the Users module DetailView, allowing authenticated attackers to extract data via blind SQL injection.

SuiteCRM 7.10.7 has an SQL injection vulnerability via the parentTab parameter in the email module, allowing authenticated attackers to extract data via boolean-based blind SQL injection.

ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads.

R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler (SEH) overwrite by supplying malicious input. Attackers can craft a payload string in the 'Language for menus and messages' field to overwrite SEH records and achieve code execution with calculator or arbitrary shellcode.

A vulnerability has been found in Fosowl agenticSeek 0.1.0 affecting the function PyInterpreter.execute in the file sources/tools/PyInterpreter.py of the query Endpoint component. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond.

The Song-Li cross_browser project (up to ca690f0fe6954fd9bcda36d071b68ed8682a786a) contains a SQL injection vulnerability in the file flask/uniquemachine_app.py in the 'details' endpoint. Attackers can manipulate the ID argument, leading to SQL injection. The attack can be performed remotely, and the exploit has been publicly disclosed.

In SourceCodester/jkev Record Management System 1.0, the index.php file in the Login component is vulnerable to SQL injection via the Username argument. Remote exploitation is possible and the exploit is public.

A weakness has been identified in Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 in an unknown function of the file /fs. Manipulating the argument cwd can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used for attacks.

Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 has a vulnerability in the index_config function of the /LoginCB file, causing improper authentication. The attack can be performed remotely, and the exploit is publicly available.