CVE Vulnerability Catalog

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS commands may be executed on the user's PC when the user invokes "Open Terminal".

Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.

The 4MOSAn product by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.

The 4MOSAn GCB Doctor product by 4MOSAn Security Technology has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.

A vulnerability was detected in Sales and Inventory System 1.0 in an unknown function of /pages/cust_edit.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely, and the exploit is now public.

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. Manipulation of the order/sort arguments leads to SQL injection. Remote exploitation is possible, and the exploit is public.

A vulnerability was identified in ractivejs up to 1.4.4 in the Ractive#set function of the Keypath Handler component. Manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely and the exploit has been made public.

A security flaw was discovered in alibaba-fusion next up to 1.27.34 in the ConfigProvider.getContextProps function of the deepMerge component. Manipulating the locale argument results in improperly controlled modification of object prototype attributes. The attack can be initiated remotely.

A vulnerability was identified in phaser3-rex-notes up to version 1.80.17 in the SetValue function of plugins/utils/object/SetValue.js in the BehaviorTree Blackboard Data Interface component. Manipulation of the key argument leads to improperly controlled modification of object prototype attributes. The attack can be launched remotely.

NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.

The Velociraptor verify() VQL function allows a user to verify an artifact for syntactic and other issues. Due to an implementation fault, the global artifact repository is used, allowing callers to overwrite existing artifacts without the required permissions. The attacker only needs NOTEBOOK_EDIT permission (e.g., an analyst role) to call this function.

A vulnerability was determined in jQWidgets up to 24.0.1 in the JQXLite.extend and jqxBaseFramework.extend functions of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely.

A vulnerability was found in TanStack devtools-vite 0.7.0 in the installPackage function of packages/devtools-bundler-core/src/package-manager.ts of the Development Devtools Event Bus component. Manipulation of the packageName argument results in OS command injection. The attack requires local access and is difficult to exploit, but the exploit has been made public.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/processlogin.php. Manipulation of the User argument leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly.

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306 in the strcpy function of the file /goform/formConfigFastDirectionW. Manipulating the ssid argument can lead to buffer overflow. The attack may be performed remotely and the exploit has been published.

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. It affects the strcpy function in the file /goform/aspRemoteApConfTempSend of the HTTP Request Handler component. Manipulating the Profile argument results in a stack-based buffer overflow. The attack can be carried out remotely, and the exploit is public.

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. It affects the httpcon_check_session_url function of the Session Validation Handler component. This manipulation leads to improper authentication. The attack can be executed remotely, and the exploit is public. The vendor did not respond.

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the httpcon_check_session_url function of the Session Validation Handler component. This manipulation causes improper authentication. Remote exploitation is possible, and the exploit is public. The vendor did not respond.

A security flaw was discovered in provectus kafka-ui up to 0.7.2 in the executeSmartFilterTest function of kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the Groovy Code Handler component. The manipulation results in code injection. The attack can be launched remotely, and the exploit has been released.