CVE Vulnerability Catalog

Permission control vulnerability in the Gallery module. Successful exploitation may affect service confidentiality.

SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in file /viewprescriptionrecord.php via the delid argument. The attack can be launched remotely, and the exploit is now public.

A vulnerability has been detected in the Assimp library (Open Asset Import Library) version 17c12da. The issue affects the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 in file code/AssetLib/MDL/MDLLoader.cpp, where manipulation of arguments transmatrix_count/pcBoneTransforms leads to buffer overflow. The attack can be initiated remotely, and the exploit is publicly available.

A cross-site scripting vulnerability has been detected in Online Shopping System 1.0 by code-projects in file offersmail.php. Manipulation of the email argument leads to XSS. The attack can be performed remotely, and the exploit is publicly available.

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

An authorization bypass vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/sales/rma/requests (Backend Sales RMA Endpoint). Manipulation allows remote authorization bypass. The exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

A vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/customers (Backend Customer Behavior Data Endpoint). Manipulation of the ID argument leads to improper privilege management. The attack can be executed remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

Cross-site scripting vulnerability in Webkul Bagisto up to 2.4.4, in the file /customer/account/rma/send-message of the RMA Message Handler component. Manipulation of the Message argument allows remote script execution in the browser. The exploit has been publicly disclosed.

An authorization bypass vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /admin/configuration/cache-management/execute (Configuration Management). Manipulation of the action argument leads to authorization bypass. The attack may be launched remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version 6.3.85, and no customer action is needed.

In the Linux kernel, a vulnerability in netfilter: nft_payload was fixed regarding mask build for partial field offload. For a partial IPv6 address match (field_len = 16, priv_len = 1), the shift 1 << 120 is undefined on 32-bit int. It also over-masks trailing bytes, potentially causing packet matching errors. The fix sets bytes directly and removes the unsafe shift.

A vulnerability has been detected in Webkul Bagisto up to version 2.4.4 in file /customer/account/rma/update-status (RMA State Validation). Manipulation leads to enforcement of behavioral workflow. The attack may be initiated remotely, and the exploit is publicly available. The vendor confirms that some issues have already been addressed, and the rest are planned for upcoming releases.

Vulnerability in DualSafe Password Manager & Digital Vault extension up to 1.4.35 on Chrome, affecting an unknown function of the postMessage-based Bridge component. Manipulation leads to information disclosure. The attack can be launched remotely but is difficult to exploit. The exploit has been published.

A cross-site scripting vulnerability has been detected in Alaev SEO Tools Extension up to version 1.0.10 for Chrome in the addDiv function of file src/popup.html (Popup UI component). Manipulation leads to basic XSS. The attack can be initiated remotely, and the exploit is publicly available. The vendor was contacted but did not respond.

A vulnerability has been detected in SourceCodester Best Employee Management System 1.0 in file /assets/uploadImage/Profile/, which allows information exposure through directory listing. The attack can be launched remotely.

The ShopSmart Loyalty for WooCommerce plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name, email, and account balance.

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled.

A vulnerability was identified in the Adblock for Youtube Extension up to version 7.2.1 on Chrome. The issue affects the updateDynamicRules function in the file contentscript.js of the Event Listener component. Manipulation of the yt-anti-adblock-detected argument causes improper authorization. The attack can be initiated remotely, and the exploit is publicly available.

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."

A vulnerability was detected in GL.iNet devices (A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000, XE3000) version 4.8.x. The issue affects the file /usr/bin/gl_nas_sys in the NAS Command Service component, allowing OS command injection. The attack can be launched remotely. Upgrading to version 4.9.0 addresses the issue.