CVE Vulnerability Catalog

GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This can be exploited to create privileged accounts by targeting the administrative user creation endpoint.

EDIMAX BR-6208AC router version V2_1.02 is vulnerable to command injection. The pppUserName field is passed directly to the system() function without proper sanitization, allowing an attacker to execute arbitrary code.

Odkryto podatność na wstrzykiwanie poleceń w usłudze DHCP daemon w D-Link DIR895LA1 v102b07. Podatność występuje w logice przetwarzania odnawiania dzierżawy, gdzie parametr nazwy hosta DHCP jest bezpośrednio łączony z poleceniem systemowym bez odpowiedniej sanitizacji.

Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 contain hardcoded credentials for an OS user account in an initialization script. An attacker can use these credentials to authenticate via SSH and access the Docker socket, allowing container escape and execution of commands as root.

Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 expose a command execution service on TCP port 2004 running with root privileges. Authentication relies on a hardcoded TOTP secret and static token, allowing an attacker to execute arbitrary OS commands.

W Yonyou YonBIP w wersji 3 i wcześniejszych, interfejs LoginWithV8 w systemie usług aplikacji danych jest podatny na atak typu path traversal, co umożliwia nieautoryzowany dostęp do wrażliwych informacji w systemie.

Podatność CVE-2025-15035 dotyczy niewłaściwej walidacji danych wejściowych w modułach VPN routera TP-Link Archer AXE75 v1.6. Umożliwia to uwierzytelnionemu atakującemu z sąsiedztwa usunięcie dowolnego pliku serwera, co może prowadzić do utraty krytycznych plików systemowych oraz przerwy w działaniu lub obniżonej funkcjonalności.

AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerability in the Login Widget. The login_error parameter is processed as PHP code, allowing an attacker to execute arbitrary PHP in the context of the WordPress web server.

Problem w Hero Motocorp Vida V1 Pro 2.0.7 umożliwia lokalnemu atakującemu spowodowanie odmowy usługi za pośrednictwem komponentu BLE.

Fluidsynth version 2.4.6 and earlier is vulnerable to a null pointer dereference in fluid_synth_monopoly.c, which can be triggered when loading an invalid MIDI file.

Portal BET firmy BeeS Software Solutions zawiera podatność na wstrzykiwanie SQL w funkcjonalności logowania. Ta podatność umożliwia wykonanie dowolnych poleceń SQL na bazie danych w tle.

Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) use login credentials as the session ID in the web-based administrative interface. A remote attacker can intercept network traffic and capture the session ID during insecure transmission.

Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) lack the HTTPOnly flag for session cookies in the web-based administrative interface. A remote attacker can capture session cookies transmitted over an insecure HTTP connection.

KAON CG3000TC and CG3000T routers contain hard-coded credentials in clear text, shared across all routers of this model. An unauthenticated remote attacker can use them to execute commands with root privileges. The vulnerability is fixed in firmware versions 1.00.67 (CG3000TC) and 1.00.27 (CG3000T).

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection via the parameter "system_ntpIt" used by the "/cgi-bin/admin/setparam.cgi" endpoint. Due to CVE-2025-66050, administrative access is not protected by default. The product has reached end-of-life, so no fix is expected.

Vivotek IP7137 camera with firmware version 0200a does not require a password by default when logging in as administrator. Users are not informed of the need to set a password, allowing unauthorized access. The product is End-of-Life, so a fix is not expected.

Vivotek IP7137 camera with firmware version 0200a has an information disclosure vulnerability allowing live camera footage to be accessed via RTSP on port 8554 without authentication. The product has reached end-of-life, so no fix is expected.

Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) transmit login credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network can intercept traffic and capture the encoded credentials.

Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) transmit login credentials in plaintext during initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network can intercept traffic and capture the credentials.

A vulnerability in GitLab CE/EE allows an authenticated user to perform a Stored Cross-Site Scripting (XSS) attack by exploiting GitLab Flavored Markdown. The issue affects versions from 18.2.2 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1.