CVE Vulnerability Catalog

Joomla extension J-BusinessDirectory before version 6.2.3 contains a Cross-site request forgery (CSRF) vulnerability. Tokens are missing on many AJAX/state-changing tasks such as contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions. Frontend CSRF requires a registered/listing-owner session, while admin CSRF requires a backend admin session.

Joomla extension J-BusinessDirectory before version 6.2.3 contains an Insecure Direct Object Reference (IDOR) vulnerability in multiple frontend/API actions. This vulnerability allows direct object references without proper authorization.

Joomla extension J-BusinessDirectory before version 6.2.3 contains an unauthenticated listing ownership takeover vulnerability. Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. Version 6.2.3 binds the action to the authenticated user and only allows unowned listings.

The J-BusinessDirectory extension for Joomla before version 6.2.3 contains a vulnerability allowing arbitrary file upload/deletion via path traversal. The _path_type parameter can point to component site/admin trees, and the extension check is weak. CSRF token is also missing on upload/remove.

Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The sync_command binary forwards unsanitized input directly to a shell execution sink in command.lua, enabling attackers with access to the MQTT broker to exploit the default-enabled command execution path to achieve full root-level system compromise.

Cudy WR3000 2.0 with firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret in the Mosquitto MQTT broker's authentication plugin. An unauthenticated attacker can extract the secret from the firmware image and forge valid JWT tokens, gaining unauthorized access to the device's mesh networking interface.

Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low privileged attacker with remote access could exploit this, leading to information exposure.

Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

Dell Command Update (DCU) versions prior to 5.7.1 contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Dell Command Update (DCU) versions prior to 5.7.1 contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low privileged attacker with local access could exploit this, leading to elevation of privileges.

Dell Command Update (DCU) versions prior to 5.7.1 contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could exploit this, leading to filesystem access.

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low privileged attacker with local access could exploit this, leading to unauthorized access.

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could exploit this, leading to elevation of privileges.

Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could exploit this, leading to elevation of privileges.

Ground Station prior to version 0.4.13 contains a vulnerability where the unauthenticated configure-sdr Socket.IO command accepts a recordingPath for the sigmf-playback SDR and stores it without validation before opening the path without enforcing containment. An absolute path or parent-directory escape ending in .sigmf-meta is parsed as JSON and returned in reply["data"]["metadata"] by the get-sdr-parameters flow. Exploitation requires the metadata file to be readable JSON and to have a sibling .sigmf-data file, but it can disclose contents outside backend/data/recordings without authentication.

Ground Station before version 0.4.13 contains a vulnerability in the unauthenticated save-waterfall-snapshot Socket.IO command. An attacker can control the snapshotName input, allowing file writes outside the data directory via path traversal. It is possible to write a YAML logging configuration file that, during service restart, executes arbitrary code (RCE) with service privileges.

Formie, a Craft CMS plugin for creating forms, before version 3.1.27 passes request-derived Hidden field defaults (e.g., User Agent, URL, query parameters) to Craft's Twig rendering layer. An unauthenticated attacker can place Twig syntax in these values, leading to server-side template evaluation (SSTI), potentially resulting in information disclosure, application state modification, or remote code execution.