CVE Vulnerability Catalog

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection.

In Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580, a vulnerability was found related to incorrect handling of NL80211 vendor commands, leading to a buffer overflow during IOCTL message processing.

A vulnerability in the WiFi driver of Samsung Mobile Processors Exynos 1380, 1480, 2400, and 1580 is caused by improper handling of an NL80211 vendor command, leading to a buffer overflow.

A vulnerability was discovered in the L2 layer of Samsung Mobile Processor, Wearable Processor, and Modem Exynos models 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Modem 5123, and Modem 5400. Incorrect handling of RRC packets leads to a Denial of Service.

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS packets.

OpenCTI before version 6.8.1 contains a vulnerability in the GraphQL mutation WorkspacePopoverDeletionMutation that allows deletion of workspace-related objects (e.g., dashboards, investigation cases) without proper authorization. An attacker can supply another user's active UUID and delete the entire workspace because the API does not validate ownership.

Coolify versions prior to and including v4.0.0-beta.420.8 have an information disclosure vulnerability in the `/api/v1/teams/{team_id}/members` and `/api/v1/teams/current/members` API endpoints. An authenticated team member can read a highly sensitive `email_change_code` belonging to other users on the same team. This code is intended for single-use email change verification and should remain secret.

Coolify versions up to and including v4.0.0-beta.420.6 are vulnerable to a stored XSS attack in the project creation workflow. An authenticated low-privileged user can create a project with a malicious name containing JavaScript, which executes in the admin's browser when the project or resource is deleted. Version 4.0.0-beta.420.7 contains a patch.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, the Git Repository field during project creation is vulnerable to command injection. User input is not properly sanitized, allowing attackers to inject arbitrary shell commands that execute on the underlying server during the deployment workflow. A regular member user can exploit this vulnerability. Version 4.0.0-beta.420.7 contains a patch for the issue.

Coolify before version 4.0.0-beta.420.7 contains a Remote Code Execution (RCE) vulnerability in the application deployment workflow. A low-privileged member can inject arbitrary Docker Compose directives during project creation or updates, allowing to mount the host filesystem and execute commands with root privileges, bypassing container isolation.

Muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution (RCE) vulnerability. An attacker can exploit this by embedding a crafted `muffon://` link on a website they control, and when a victim visits the site or clicks the link, the browser triggers Muffon's custom URL handler, leading to RCE without further interaction.

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. The supplier is currently disputing this finding and the record is under review.

Wtyczka UCRM Argentina AFIP invoices (w wersji 1.2.0 i wcześniejszych) zawiera podatność typu Cross-Site Scripting (XSS), która może umożliwić eskalację uprawnień, jeśli administrator zostanie nakłoniony do odwiedzenia spreparowanej złośliwej strony.

In Samsung Magician versions 6.3.0 through 8.3.2 on Windows, the installer creates a temporary folder with weak permissions during installation. This allows a non-admin user to perform DLL hijacking and escalate privileges.

The Thim Core plugin by ThimPress contains a Cross-Site Request Forgery vulnerability in versions from n/a through 2.3.3. This vulnerability allows an attacker to leverage CSRF to perform unauthorized actions in the context of a logged-in administrator.

A vulnerability was discovered in the Camera of Samsung Mobile and Wearable Processors Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper validation of user-space input in the issimian device driver leads to information disclosure and denial of service.

W LoginWP - Pro występuje luka związana z brakiem autoryzacji, która pozwala na dostęp do funkcji, które nie są odpowiednio ograniczone przez listy kontroli dostępu (ACL). Problem dotyczy wersji od n/a do 4.0.8.5.

The LoginWP - Pro plugin contains a missing authorization vulnerability that allows accessing functionality not properly constrained by ACLs. The issue affects versions up to and including 4.0.8.5.

The Dokan Pro WordPress plugin has a Stored Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This affects all versions up to 3.14.5.