CVE Vulnerability Catalog

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor. This allows users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the affected flipbook for editing, including administrators.

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to extract arbitrary data from the database, including password hashes.

XSS vulnerability in Auktion NG Auktionssoftware up to 20260722. Attack via manipulation of email argument in /forgotpasswd.html in Public Password Reset Endpoint. Remote exploitation possible, exploit public.

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4 in the copy_msg_element function of the Device Discovery Service component. Input manipulation can lead to a stack-based buffer overflow, and the attack can be executed remotely. The exploit has been published and may be used; the vendor did not respond to the disclosure.

A security flaw in JusticeRage Manalyze 1.0.0. The function PE::_parse_relocations in manape/pe.cpp of the PE Parser component is affected. Manipulating the BlockSize argument results in integer underflow. The attack requires local access. A patch named c372b6bbca9d8c63812be50596fefa4a79c65fd0 is recommended.

XSS vulnerability in Smart Attendance System with QR Code Scanner 1.0. Attack via manipulation of full_name argument in prepend function of student_signup.php in Self-Registration component. Remote attack, exploit public.

SSRF vulnerability in iFlytek astron-agent up to 1.0.6. Affects UrlCheckTool.checkUrl in debugToolV2 API endpoint. Manipulation of endPoint argument allows remote SSRF. Patch available in version reward-1575.

SQL Injection vulnerability in iFlytek astron-agent up to 1.0.7. Affects function in ChatBotMarketMapper.xml in getBotList API endpoint. Manipulation of sortDirection argument allows remote SQL injection. Patch in version reward-1575.

Vulnerability in FasterXML jackson-databind causes quadratic complexity during deserialization of documents with object identities (JsonIdentityInfo). When IDs are defined in reverse order, the number of comparisons grows quadratically, potentially leading to CPU exhaustion.

Vulnerability in FasterXML jackson-databind causes unbounded memory growth when using name-based polymorphism with a fallback (defaultImpl). Each unknown type ID is stored in an unbounded map, leading to memory leak.

Vulnerability in FasterXML jackson-core (UTF8DataInputJsonParser) causes unbounded accumulation of error text when processing a malicious token, potentially leading to OutOfMemoryError for the whole JVM.

Deserialization vulnerability in recommenders-team recommenders up to 1.2.1. Affects pickle.load in mind_iterator.py in Dict Loading component. Remote attack, exploit public.

SQL injection vulnerability in SourceCodester Online Reviewer Management System 1.0 in file /reviewer_0/admins/assessments/pretest/exam-delete.php. Manipulation of argument test_id allows remote SQL injection.

SQL injection vulnerability in SourceCodester Online Reviewer Management System 1.0 in file /reviewer_0/admins/assessments/pretest/btn_functions.php?action=update. Manipulation of argument test_id allows remote SQL injection.

Vulnerability in Ghidra before 12.1.4. Failure to validate TYPE_COL byte in OptionsDB.createUnregisteredOption() causes ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Malicious database file can cause application stall and prevent resource cleanup.

Blind SQL injection vulnerability in ClipBucket v5 before 5.5.3-#182 in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. Unauthenticated attackers can exploit time-based blind SQL injection to extract credentials and admin password hashes.

Authorization bypass vulnerability in Photoview through 2.4.0 in the shareAlbum GraphQL mutation allows authenticated users to create share links for albums owned by other users. Attackers can supply arbitrary album IDs to generate working share tokens for victim albums, exposing photos and sub-albums to anyone with the link.

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0 in an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=update. Manipulation of the argument difficulty_id results in SQL injection. The attack can be executed remotely, and the exploit has been made public.

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0 in an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=add. The manipulation of the argument difficulty_id leads to SQL injection. Remote exploitation is possible, and the exploit has been disclosed publicly.

Deserialization vulnerability in Dask up to 2026.8.0. Affects from_npy_stack in dask/array/core.py in Loader component. Remote attack, exploit public.