CVE Vulnerability Catalog

Users with webhook permissions can conduct SSRF via webhooks because the destination URL is not validated. If they also have permission to view webhook logs, the (partial) request response is disclosed.

A cross-site request forgery (CSRF) vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed.

W glib znaleziono lukę, która prowadzi do przepełnienia całkowitego podczas tworzenia plików tymczasowych. To zjawisko skutkuje dostępem do pamięci poza przydzielonym obszarem, co umożliwia atakującemu potencjalne wykonanie ataku typu path traversal lub dostęp do prywatnych treści plików tymczasowych poprzez tworzenie dowiązań symbolicznych.

A vulnerability was determined in Tenda CP6 11.10.00.243. The affected element is the function sub_2B7D04 of the component uhttp, leading to risky cryptographic algorithm usage. The attack may be launched remotely but is characterized by high complexity and difficulty. The exploit is public.

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. It affects an unknown function of the file /etc_ro/shadow in the Administrative Interface component. Manipulation with the input "Fireitup" causes hard-coded credentials. The attack can only be executed locally and requires a high degree of complexity.

A cross-site scripting vulnerability was detected in Campcodes Hospital Management System 1.0, affecting the /admin/edit-doctor-specialization.php file in the Edit Doctor Specialization Page component. Input manipulation allows script injection, and the attack can be launched remotely. The exploit is publicly available.

A flaw was found in Portabilis i-Educar up to 2.10. An unknown function of the file /intranet/educar_tipo_ensino_cad.php is affected. Manipulation of the nm_tipo argument leads to cross site scripting. The attack can be executed remotely and the exploit has been published.

A vulnerability was detected in O2OA up to 10.0-410 in an unknown function of the /x_query_assemble_designer/jaxrs/importmodel file within the Personal Profile Page component. Manipulation of the description/applicationName/queryName arguments results in cross site scripting, and the attack can be carried out remotely. The exploit is public and the vendor stated it will be fixed in a new version.

A cross-site scripting (XSS) vulnerability was detected in O2OA up to version 10.0-410. It affects an unknown function in the file /x_query_assemble_designer/jaxrs/statement of the Personal Profile Page component and is triggered by manipulating the description/queryName argument. The attack can be launched remotely and the exploit has been publicly disclosed.

A weakness has been identified in O2OA up to 10.0-410 affecting an unknown function of the file /x_query_assemble_designer/jaxrs/table within the Personal Profile Page component. Manipulation of the description/applicationName/queryName arguments causes cross site scripting, and the attack may be initiated remotely. The exploit has been made available to the public and could be exploited; the vendor stated it will be fixed in a new version.

A cross-site scripting (XSS) security flaw was discovered in O2OA up to version 10.0-410. It affects an unknown function in the file /x_query_assemble_designer/jaxrs/stat of the Personal Profile Page component, where manipulation of the name/alias/description/applicationName arguments leads to script execution. The attack can be launched remotely and the exploit has been released publicly.

Tenda AC9 version 15.03.05.19 contains hard-coded credentials in the /etc_ro/shadow file (Administrative Interface component). The attack can be launched locally, is highly complex, and difficult to exploit. The exploit has been publicly disclosed and may be utilized.

A vulnerability was identified in Cudy LT500E up to 2.3.12. Affected is an unknown function of the file /squashfs-root/etc/shadow of the component Web Interface. The manipulation leads to use of hard-coded password. The attack must be carried out locally. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit is publicly available and might be used. Upgrading to version 2.3.13 addresses this issue. The vendor explains: 'The firmware does store a default password of 'admin'. This password has been deprecated since LT500E firmware version 2.3.13 and is no longer used. The LT500E does not have an administrator password set by default; a new password (at least 8 characters) must be manually created upon first login to the web management page.'

A cross-site scripting vulnerability was determined in Portabilis i-Educar up to 2.10, affecting the /intranet/educar_nivel_ensino_cad.php file. Manipulation of the nm_nivel/descricao arguments allows script injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

A cross-site scripting vulnerability was found in Portabilis i-Educar up to 2.10, affecting the /intranet/educar_tipo_regime_cad.php file. Manipulation of the nm_tipo argument allows script injection, and the attack can be initiated remotely. The exploit has been made public and could be used.

A cross-site scripting (XSS) vulnerability was found in Portabilis i-Educar up to version 2.10 in the file /intranet/educar_tipo_ocorrencia_disciplinar_cad.php. Manipulation of the nm_tipo/descricao arguments allows injection of malicious script. The exploit has been publicly disclosed and can be used remotely.

A cross-site scripting (XSS) flaw was found in Portabilis i-Educar up to version 2.10 in the file /module/FormulaMedia/edit. Manipulation of the nome/formulaMedia arguments enables injection of malicious script. The exploit has been published and can be used remotely.

A cross-site scripting (XSS) vulnerability was detected in Portabilis i-Educar up to version 2.10 in the file /module/TabelaArredondamento/edit, within the Cadastrar tabela de arredondamento Page component. Manipulation of the Nome argument leads to execution of malicious script. The attack can be performed remotely and the exploit is publicly available.

A weakness has been identified in O2OA up to 10.0-410 affecting unknown code of the file /x_processplatform_assemble_designer/jaxrs/script within the Personal Profile Page component. Manipulation of the name/alias/description/applicationName arguments can lead to cross site scripting, and the attack can be executed remotely. The exploit has been made available to the public and could be exploited.

A cross-site scripting (XSS) security flaw was discovered in O2OA up to version 10.0-410. It affects an unknown part of the file /x_processplatform_assemble_designer/jaxrs/process of the Personal Profile Page component, where manipulation of the name/alias arguments leads to script execution. Remote exploitation is possible and the exploit has been released publicly.