CVE Vulnerability Catalog

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.

An Improper Input Validation in the UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access. The vulnerability affects the UISP application component.

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A cross-site scripting vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to version 20250813. Manipulation of the gohome argument allows the attack to be carried out remotely. The exploit is publicly available and the vendor did not respond to the disclosure.

A vulnerability was identified in Cudy WR1200EA 2.3.7-20250113-121810, affecting an unknown function of the file /etc/shadow. Manipulation leads to the use of a default password. The attack requires local access and is highly complex. The exploit has been publicly disclosed and may be utilized, and the vendor did not respond to the disclosure.

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0 in the Administrative Interface component, where manipulation of the file /etc/shadow.sample results in use of default credentials. Attacking locally is a requirement and the attack is highly complex. The exploit has been released to the public and may be exploited.

A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688, affecting an unknown function of the file /etc/shadow (Administrative Interface component). Manipulation leads to the use of default credentials. The attack requires local access and is highly complex. The exploit is publicly available and the vendor did not respond to the disclosure.

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) accessible without authentication or tamper protection. An attacker with physical access can use a standard SPI programmer and flashrom to extract the firmware. This exposes sensitive configuration data such as APN credentials, backend server information, and network parameters.

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protocol specific passwords in cases where symmetric passwords are required between devices.

In the FNKvision Y215 CCTV Camera (10.194.120.40), a vulnerability was detected in the crypt function of the /etc/passwd file. The manipulation leads to use of a weak hash; the attack is local-only, of high complexity and difficult exploitability, and the exploit has been publicly disclosed. The vendor did not respond to the disclosure.

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint.

Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access, allowing a user to read a thread via AI posts.

Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions.

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The patch is identified as 821342cd8d952e8bd214cb16145da785a92f5681. A patch should be applied to remediate this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output: only a minimal allowlist of basic formatting tags is kept and all attributes are stripped, so injected <script> or event-handler markup is removed and displayed as inert text."

A vulnerability was identified in Portabilis i-Diario up to 1.5.0. Impacted is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is 821342cd8d952e8bd214cb16145da785a92f5681. It is suggested to install a patch to address this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output: only a minimal allowlist of basic formatting tags is kept and all attributes are stripped, so injected <script> or event-handler markup is removed and displayed as inert text."

A vulnerability was found in libxml2 up to version 2.14.5, involving uncontrolled recursion in the xmlParseSGMLCatalog function of the xmlcatalog component. The attack requires local access and can be triggered with untrusted SGML catalogs.

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-in-the-middle attack and obtain sensitive information.

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/public_distrito_cad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2.12 mitigates this issue. It is recommended to upgrade the affected component. The vendor explains, that "[t]he reported attack vector was tested against the corrected version, and the previously described XSS behavior could no longer be reproduced".

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.12 is sufficient to resolve this issue.