CVE Vulnerability Catalog

Nieprawidłowe zarządzanie wartościami OTP/TOTP/HOTP w aplikacji privacyIDEA Authenticator v.4.3.0 firmy NetKnights GmbH na system Android umożliwia lokalnym atakującym z dostępem root ominięcie uwierzytelniania dwuetapowego. Atakujący mogą przechwytywać rutyny kryptograficzne aplikacji i ścieżki deszyfrowania, co pozwala na odzyskanie tajnych danych w postaci tekstu jawnego.

W wersji 1.0.4 ładowarki StarCharge Artemis AC o mocy 7-22 kW odkryto twardo zakodowany klucz AES, który umożliwia atakującym fałszowanie lub deszyfrowanie ważnych tokenów logowania.

Wersja 1.0.4 ładowarki StarCharge Artemis AC o mocy 7-22 kW zawiera podatność typu przepełnienie stosu w funkcji cgiMain w pliku download.cgi.

IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed would be executed in the victim's Web browser within the security context of the hosting site.

The Rox software running BeWelcome contains a PHP object injection vulnerability due to deserialization of untrusted data. The `formkit_memory_recovery` parameter and the `bwRemember` cookie are passed to unserialize(), allowing an attacker to execute arbitrary code or write files on the server.

Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activity_state/1/category_id/1001. Executing manipulation of the argument category_id can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

An authorization bypass vulnerability was detected in Bdtask Pharmacy Management System up to 9.4, affecting an unknown function in /user/edit_user/ (User Profile Handler component). The attack can be performed remotely and a public exploit is available.

A SQL injection vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to version 20251013, affecting the /Admin_dashboard/edit_profile file. Manipulation of the first_name/last_name arguments allows SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed.

Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement. This issue affects Docker Desktop through 4.48.0.

W MikroTik RouterOS w wersji 7.14.2 oraz SwOS w wersji 2.18 występuje problem, który domyślnie udostępnia interfejs zarządzania WebFig przez niezabezpieczony protokół HTTP. Umożliwia to atakującemu przechwycenie danych logowania poprzez wykonanie wstrzykniętego kodu JavaScript w przeglądarce administratora.

W systemie eTimeTrackLite Web do wersji 12.0 (20250704) odkryto lukę w kontroli uprawnień, która pozwala nieautoryzowanym atakującym na dostęp do określonych tras oraz modyfikację konfiguracji połączeń z bazą danych.

W module konfiguracji sieciowej ładowarki Startcharge Artemis AC Charger 7-22 kW w wersji 1.0.4 występuje problem, który pozwala uwierzytelnionym atakującym z sieci lokalnej na przesyłanie zmodyfikowanego oprogramowania, co prowadzi do wykonania dowolnego kodu.

Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML via the RelayState parameter.

Zidentyfikowano słabość w VeePN do wersji 1.6.2, która dotyczy nieznanej funkcji pliku C:\Program Files (x86)\VeePN\avservice\avservice.exe komponentu AVService. Manipulacja ta prowadzi do niecytowanej ścieżki wyszukiwania.

A security flaw has been discovered in code-projects Client Details System 1.0, involving an authorization bypass in an unknown function. The attack can be launched remotely and the exploit has been released to the public.

A vulnerability was identified in code-projects Client Details System 1.0 in an unknown function of /admin/manage-users.php. Manipulation leads to cross site scripting. The attack can be initiated remotely and the exploit is publicly available.

A cross site scripting vulnerability was determined in code-projects Client Details System 1.0. An unknown function of the file /admin/clientview.php is impacted. The attack can be launched remotely and the exploit has been publicly disclosed.

A cross site scripting vulnerability was found in code-projects Client Details System 1.0. The issue affects some unknown processing of the file /update-clients.php. The attack can be initiated remotely and the exploit has been made public.