CVE Vulnerability Catalog

A vulnerability exists in Xinhu RockOA up to 2.6.9 in the publicsaveAjax function of /index.php due to improper authorization. The attack can be carried out remotely and the exploit has been made public.

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request with an entity body, because a subsequent request can occur within the persistent connection between an Akamai proxy server and an origin server if the origin server violates certain Internet standards.

Apple addressed an out-of-bounds read with improved bounds checking in macOS Sequoia, Sonoma, and Ventura. The flaw allows an app to cause unexpected system termination.

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.

A vulnerability was found in code-projects Student Information Management System 1.0 in /login.php. Manipulation of the uname argument results in cross-site scripting (XSS). The attack may be performed remotely, and the exploit has been made public.

In the xz package for Go prior to version 0.5.14, it is possible to place data before an LZMA-encoded byte stream without detection during header reading. This leads to increased memory consumption because the implementation allocates the full decoding buffer immediately after reading the header.

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.

A vulnerability was determined in Comfast CF-N1 2.6.0 affecting the wifilith_delete_pic_file function of the file /usr/bin/webmgnt. Manipulation of the portal_delete_picname argument causes command injection. The attack is possible to be carried out remotely and the exploit has been publicly disclosed.

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

A vulnerability has been found in Comfast CF-N1 2.6.0 affecting the ping_config function of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation is possible and the exploit has been disclosed to the public.

A flaw has been found in Comfast CF-N1 2.6.0 affecting the ntp_timezone function of the file /usr/bin/webmgnt. Manipulation of the timestr argument leads to command injection. The attack may be launched remotely and the exploit has been published.

A vulnerability was detected in Comfast CF-N1 2.6.0 affecting the multi_pppoe function of the file /usr/bin/webmgnt. Manipulation of the phy_interface argument results in command injection. The attack may be initiated remotely and the exploit is now public.

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8 affecting an unknown function of the file /goform/set_blacklist (HTTP Handler component). Manipulation of the mac argument leads to OS command injection. The attack can be launched remotely and the exploit has been publicly disclosed.

A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service.

XWiki Platform stores sensitive cookies unencrypted in job statuses for PDF export. Access to a backup of the data directory can reveal plain text passwords. Patched in versions 16.4.8, 16.10.7, and 17.4.0-rc-1.

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function.