CVE Vulnerability Catalog

A vulnerability was discovered in the pxscan.sys driver of Prevx version 3.0.5.220, allowing an attacker to cause a denial of service (DoS) by sending IOCTL code 0x22E044. The attack terminates all processes listed under the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files.

In laravel-file-manager version 3.3.1 and earlier, an authenticated attacker can upload a .png file containing PHP code, which despite client-side validation failure is saved on the server. Using the rename API, the attacker changes the extension to .php, enabling remote code execution (RCE).

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.

W podatności CVE-2025-61128 występuje przepełnienie bufora na stosie w oprogramowaniu układowym WAVLINK QUANTUM D3G/WL-WN530HG3 w wersji M30HG3_V240730 oraz prawdopodobnie w innych modelach WAVLINK. Atakujący mogą wykonać dowolny kod, wysyłając odpowiednio skonstruowaną wartość referrera w żądaniu POST do login.cgi.

Wykryto podatność typu out-of-bounds read w Monkey's Audio 11.31, szczególnie w funkcji CAPECharacterHelper::GetUTF16FromUTF8. Problem wynika z niewłaściwego zarządzania długością wejściowego ciągu UTF-8, co może prowadzić do odczytu poza granicami pamięci.

IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.

IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.

IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS, and ADMIN_PASSWORD parameters when adding a new DNS entry. The values are stored and later rendered in the web interface without proper sanitation or encoding.

IPFire versions prior to 2.29 (Core Update 198) contain a stored XSS vulnerability allowing an authenticated attacker to inject arbitrary JavaScript via the txt_mailuser and txt_mailpass parameters when updating mail server settings. Values are stored and rendered without proper encoding.

IPFire versions prior to 2.29 (Core Update 198) contain a stored XSS vulnerability allowing an authenticated attacker to inject arbitrary JavaScript via the REMOTELOG_ADDR parameter when updating the remote syslog server address. The value is stored and rendered without proper encoding.

IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability. An authenticated attacker can execute arbitrary commands as the 'nobody' user via the BE_NAME parameter when installing a blacklist, as the value is interpolated into a shell invocation without proper sanitation.

IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the user 'nobody' via multiple parameters when creating a Proxy report. Parameters such as DAY_BEGIN, MONTH_BEGIN, YEAR_BEGIN, DAY_END, MONTH_END, YEAR_END, NUM_DOMAINS, PERF_INTERVAL, NUM_CONTENT, HIST_LEVEL, NUM_HOSTS, NUM_URLS, and BYTE_UNIT are interpolated directly into the shell invocation without sanitization.

An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write.

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption.

W wersji Firefox 142 istniała możliwość, że skompromitowany proces podrzędny mógł wywołać błąd use-after-free w procesie GPU lub przeglądarki za pomocą wywołań IPC związanych z WebGPU. Ta podatność mogła umożliwić ucieczkę z piaskownicy procesu podrzędnego.

A flaw in Red Hat Openshift AI Service's TrustyAI component grants all service accounts and users cluster-wide permissions to get, list, and watch any pod in any namespace. It also allows access to all persistentvolumeclaims and lmevaljobs.

The “Diagnostics Tools” page of the TropOS 4th Gen web configuration utility does not properly validate user-controlled input, allowing an authenticated high-privileged user to inject commands into the device command shell. Injected commands can be used to execute SUID applications and gain root access.

On TropOS 4th Gen devices, an authenticated user able to run user-level shell commands can gain access via SSH to an unrestricted root shell. This is possible through abuse of a set of scripts and executables that allow certain commands to be run as root from an unprivileged context.

A command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device.