CVE Vulnerability Catalog

Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency access. By using a crafted URL while on the Emergency Access web page, an unauthorized person can gain access to the Passwordstate Administration section.

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation.

A vulnerability in the diagnostic component of AxxonSoft Axxon One VMS (C-Werk) versions 2.0.0 through 2.0.1 on Windows allows a local attacker to obtain licensing-related information such as timestamps, license states, and registry values by reading diagnostic export files created by the built-in troubleshooting tool.

A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory, leading to crashes on the client side, particularly when using libgcrypt.

The Compress & Upload WordPress plugin before version 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup).

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product's management tool.

W glib znaleziono lukę, która prowadzi do przepełnienia całkowitego podczas tworzenia plików tymczasowych. To zjawisko skutkuje dostępem do pamięci poza przydzielonym obszarem, co umożliwia atakującemu potencjalne wykonanie ataku typu path traversal lub dostęp do prywatnych treści plików tymczasowych poprzez tworzenie dowiązań symbolicznych.

A vulnerability was determined in Tenda CP6 11.10.00.243. The affected element is the function sub_2B7D04 of the component uhttp, leading to risky cryptographic algorithm usage. The attack may be launched remotely but is characterized by high complexity and difficulty. The exploit is public.

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. It affects an unknown function of the file /etc_ro/shadow in the Administrative Interface component. Manipulation with the input "Fireitup" causes hard-coded credentials. The attack can only be executed locally and requires a high degree of complexity.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A cross-site scripting vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to version 20250813. Manipulation of the gohome argument allows the attack to be carried out remotely. The exploit is publicly available and the vendor did not respond to the disclosure.

A vulnerability was identified in Cudy WR1200EA 2.3.7-20250113-121810, affecting an unknown function of the file /etc/shadow. Manipulation leads to the use of a default password. The attack requires local access and is highly complex. The exploit has been publicly disclosed and may be utilized, and the vendor did not respond to the disclosure.

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0 in the Administrative Interface component, where manipulation of the file /etc/shadow.sample results in use of default credentials. Attacking locally is a requirement and the attack is highly complex. The exploit has been released to the public and may be exploited.

A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688, affecting an unknown function of the file /etc/shadow (Administrative Interface component). Manipulation leads to the use of default credentials. The attack requires local access and is highly complex. The exploit is publicly available and the vendor did not respond to the disclosure.

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) accessible without authentication or tamper protection. An attacker with physical access can use a standard SPI programmer and flashrom to extract the firmware. This exposes sensitive configuration data such as APN credentials, backend server information, and network parameters.

A vulnerability was found in libxml2 up to version 2.14.5, involving uncontrolled recursion in the xmlParseSGMLCatalog function of the xmlcatalog component. The attack requires local access and can be triggered with untrusted SGML catalogs.

Lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-in-the-middle attack and obtain sensitive information.

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/public_distrito_cad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2.12 mitigates this issue. It is recommended to upgrade the affected component. The vendor explains, that "[t]he reported attack vector was tested against the corrected version, and the previously described XSS behavior could no longer be reproduced".

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.12 is sufficient to resolve this issue.