CVE Vulnerability Catalog

In DevaslanPHP project-management versions 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1, the whereRaw function in the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the Timesheet Dashboard component is vulnerable to SQL injection via manipulation of the filter argument. The attack can be carried out remotely. The exploit is now public.

In fuzui StudentInfo up to commit fcc42a639ec7cef620651bfd0f07ebb660529e3f, an unknown function in the file /StudentInfo/StudentHandler/moditypasswordstu of the Password Change Endpoint component is vulnerable to authorization bypass via manipulation of sid/tid arguments. The attack can be executed remotely. This product uses a rolling release, so version information is unavailable.

Vulnerability in TOTOLINK N150RT 3.4.0-B20201030 in the system function of /boafrm/formWlSiteSurvey in the web management interface. Manipulation of the wlanif argument leads to OS command injection. Remote attack possible, exploit publicly available.

In Trusted Domain Project OpenARC up to version 1.0.0.Beta1, the arc_parse_canon_t function in the library libopenarc/arc-canon.c of the libopenarc component leads to a null pointer dereference. The attack may be launched remotely. The exploit has been released to the public. Upgrading to version 1.0.0.Beta0 is recommended.

A vulnerability was identified in CloudClassroom-PHP-Project allowing SQL injection in updateguest.php via the gname argument. The attack can be initiated remotely and the exploit is publicly available.

Vulnerability in Privoce VoceChat Server up to version 0.5.36 in the open_graph::fetch function of src/api/resource.rs in the open_graphic_parse Endpoint component. Manipulation of the url argument leads to server-side request forgery (SSRF). Remote attack possible, exploit publicly disclosed.

A memory corruption vulnerability was found in UERANSIM up to 3.3.0 in the ULInformationTransfer function. Manipulating the dedicatedNASMessage argument leads to memory corruption. The attack can be initiated remotely and the exploit is public.

Vulnerability in Trusted Domain Project OpenDMARC up to version 1.4.2 in the opendmarc_policy_query_dmarc function in libopendmarc/opendmarc_policy.c of the Internationalized Domain Name Handler component. Manipulation leads to encoding error. Remote attack possible, exploit publicly disclosed.

A null pointer dereference vulnerability was found in OpenDMARC up to 1.4.2 in the opendmarc_spf_ipv6_explode function. Manipulating the cp argument causes the issue. The attack can be initiated remotely and the exploit is published.

Vulnerability in Trusted Domain Project OpenDKIM up to version 2.11.0 in the dkim_qp_decode function of util.c in the Decoder component. Manipulation leads to off-by-one error. Remote attack possible, exploit public.

Vulnerability in Trusted Domain Project OpenDKIM up to version 2.11.0 in the dkim_canon_selecthdrs function of libopendkim/dkim-canon.c in the DKIM Signature Header Selection component. Manipulation of the h argument leads to out-of-bounds write. Remote attack possible, exploit publicly available.

A SQL injection vulnerability was found in Mini-Inventory-and-Sales-Management-System in the order_by function. Manipulating the orderBy argument allows remote attack. The exploit is public. The project is no longer maintained.

A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 version 4.6.1.4-build202604241011 within an unknown function of the Debug Service component. Improper authentication allows remote exploitation, and a public exploit is already available.

A vulnerability was found in Krayin laravel-crm up to 2.2.4. An unknown function in packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the admin-config-setup API Endpoint allows authorization bypass. The attack can be launched remotely and the exploit is public. Upgrading to version 2.2.5 mitigates the issue.

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource identifiers. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.2.6 is sufficient to resolve this issue. The identifier of the patch is 13d6988cda8d69ece45ee1890effc90a7f21cdc1. It is suggested to upgrade the affected component.

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be used. Upgrading to version 2.2.6 is sufficient to fix this issue. This patch is called a399404a388d8ad2700a01349d0d98069c8e85a4. The affected component should be upgraded.

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 2.2.6 is recommended to address this issue.