CVE Vulnerability Catalog

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Wavlink NU516U1 (M16U1_V240425) in the function sub_401778 of /cgi-bin/firewall.cgi. Manipulation of the dmz_flag argument leads to command injection. The attack can be executed remotely and the exploit has been publicly disclosed.

A flaw was found in Wavlink NU516U1 (M16U1_V240425) in the function sub_403010 of /cgi-bin/wireless.cgi, in the AddMac Page component. Manipulation of the macAddr argument leads to command injection. The vulnerability can be exploited remotely and the exploit has been publicly disclosed.

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication.

The OpenSSL backend in glib-networking fails to properly check the return value of a call to BIO_write(), resulting in an out-of-bounds read.

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. A highly privileged attacker with local access could exploit this vulnerability to execute arbitrary commands with root privileges.

IBM Watson Studio versions 4.0 through 5.2.0 on Cloud Pak for Data is vulnerable to cross-site scripting. An authenticated user can embed arbitrary JavaScript code in the Web UI, altering intended functionality and potentially leading to credentials disclosure within a trusted session.

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.

A security flaw was discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. The function stream_handler in ml_logger/server.py is affected; manipulating the key argument leads to information disclosure. The attack can be initiated remotely and the exploit has been released.

A use-after-free vulnerability in libxslt while parsing xsl nodes can lead to dereference of expired pointers and application crash.

Monkeytype, a typing test application, has an XSS vulnerability due to improper handling of user input when loading a saved custom text. Affects versions 25.36.0 and prior; fixed in version 25.44.0.

Dell PowerScale OneFS versions 9.5.0.0 through 9.11.0.0 contain an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure.

Vulnerability in the ml-logger project (up to commit acf255bade5be6ad88d90735c8367b28cbe3a743) affects the log_handler function in ml_logger/server.py, Ping Handler component. Manipulation of the data argument causes deserialization, which can be exploited remotely.

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-* headers to the origin as-is, or where the origin trusts them without validation, an attacker can inject an arbitrary host and trigger an open redirect that sends users to a malicious domain. This issue has been patched in version 1.130.1.

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic.

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The file /api/areacliente/pessoa/validarCpf is affected; manipulating the pes_cpf argument can lead to authorization bypass. The attack can be executed remotely and the exploit has been published. Upgrading to version 2025.8.0 resolves the issue.

In Retail Mode prior to version 5.59.4, improper input validation allows attackers to execute privileged commands on their own devices.

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This is due to insufficient validation of user arguments passed to specific CLI commands. An attacker could log in with level 15 credentials and use crafted commands.

A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an unlearned MAC address on a switch virtual interface (SVI) that has an egress ACL applied. An attacker could exploit this vulnerability by causing the VLAN to flush its MAC address table. This condition can also occur if the MAC address table is full. A successful exploit could allow the attacker to bypass an egress ACL on an affected device.