CVE Vulnerability Catalog

The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.

The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation without any authorization check, allowing any unauthenticated visitor to wipe the plugin's data.

The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server — including sensitive configuration files — and to overwrite existing non-PHP files, which can be leveraged to compromise administrator accounts and the whole site.

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.

A cross-site scripting (XSS) vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script in the victim's browser.

Vulnerability in FreeBSD's kern_jail_set() and kern_jail_get() when the JAIL_AT_DESC flag is used. Double release of the caller's current prison reference can lead to a reference count underflow and use-after-free.

Vulnerability in FreeBSD kernel when msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object. Physical pages are marked invalid but remain in the pager's list, leading to a double free on object destruction.

Vulnerability in FreeBSD during execve(2) of SUID binaries. The new virtual address space is installed before credentials are updated, allowing another process of the same user to access memory via procfs or linprocfs.

The Atarim – AI Agency for WordPress plugin up to version 5.1.1 is vulnerable to arbitrary file deletion due to insufficient file path validation. Authenticated attackers with author-level access can delete arbitrary files, potentially leading to remote code execution.

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0, affecting an unknown function in /admin/ajax.php?action=delete_menu. Manipulation of ID leads to SQL injection. Remote attack is possible and exploit is public.

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0, affecting an unknown function in /admin/ajax.php?action=save_menu. Manipulation of ID leads to SQL injection. Remote attack is possible and exploit is public.

A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0, affecting an unknown function in /admin/ajax.php?action=login. Manipulation of Username leads to SQL injection. Remote attack is possible and exploit is public.

A vulnerability was found in BusyBox up to version 1.30.1 in the file networking/wget.c, in the FEATURE_WGET_TIMEOUT Handler component. Manipulation of the -T argument leads to a null pointer dereference. Local access is required. The exploit has been disclosed, and a patch is available (commit 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff).

A flaw has been found in Comfast CF-N1-S 2.6.0.1, affecting the function get_para_from_uri in /cgi-bin/mbox-config. Manipulation of width/height arguments causes stack-based buffer overflow. The attack can be initiated remotely.

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535, affecting the strcpy function in /goform/aspApBasicConfigUrcp. Manipulation of pvid leads to stack-based buffer overflow. Remote attack is possible and exploit is public.

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306, affecting the strcpy function in /goform/formGroupConfig. Manipulation of timestart leads to stack-based buffer overflow. Remote attack is possible and exploit is public.

A vulnerability was found in SPLWare esProc up to version 20260507, involving deserialization in the ObjectInputStream.readUnshared function in SocketData.java. Manipulation leads to unsafe deserialization, and the attack can be performed remotely.

A SQL injection vulnerability was found in code-projects Online Job Portal System 1.0 in the Password Recovery component, in the /ForPass.php file. Manipulation of the txtUserName argument allows SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed.

A command injection vulnerability was found in TRENDnet Router version 1.1.02b01 in the /cgi-bin/ping.cgi file, in an unknown function. Manipulation of the wan_type argument causes command injection. The attack can be initiated remotely, and the exploit has been published.

The Speed Optimizer plugin for WordPress up to version 7.8.0 is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access can inject arbitrary web scripts that execute when a user accesses an injected page. This is exploitable only when the Lazy Load Media option is enabled.