CVE Vulnerability Catalog

The Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint, allowing for remote code execution.

Weaver (Fanwei) E-office w wersjach przed 10.0_20221201 zawiera podatność na nieautoryzowane przesyłanie plików w punkcie końcowym OfficeServer.php. Umożliwia to zdalnym atakującym przesyłanie złośliwych plików poprzez wysyłanie wieloczęściowych żądań POST z dowolnymi nazwami plików i ukrytymi typami zawartości.

CVE-2026-4670 vulnerability in MOVEit Automation allows for authentication bypass. This affects versions from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, and versions prior to 2024.0.0.

An improper restriction of XML external entity reference vulnerability in RTI Connext Professional (Core Libraries) allows serialized data external linking. It affects Connext Professional versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, and from 4.3x before 5.1.*.

Plack::Middleware::XSendfile versions through 1.0053 for Perl allow client-controlled path rewriting. A client can set the X-Sendfile-Type header to 'X-Accel-Redirect', enabling path mapping to arbitrary files on the server.

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.

Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie to change primary and secondary DNS servers.

Tenda W308R v2 version V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS servers and redirect user traffic to malicious sites.

W Wazuh, od wersji 4.4.0 do przed wersją 4.14.4, występuje podatność typu path traversal w procedurze synchronizacji klastra, która pozwala uwierzytelnionemu uczestnikowi klastra na zapisanie dowolnych plików poza zamierzonym katalogiem na innych węzłach klastra. Może to prowadzić do wykonania kodu w kontekście usługi Wazuh poprzez nadpisanie modułów Pythona używanych przez komponenty Wazuh.

DocsGPT, a GPT-powered chat for documentation, has a vulnerability in versions from 0.15.0 to before 0.16.0 that allows an attacker to achieve remote code execution (RCE) via a malicious payload bypassing the 'MCP test'. This issue has been patched in version 0.16.0.

Podatność typu 'Path Traversal' w TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center umożliwia nieprawidłowe ograniczenie ścieżki do zastrzeżonego katalogu. Problem dotyczy wersji Pardus Software Center przed 0.6.4.

Cockpit w wersji 2.13.5 i wcześniejszych jest podatny na wykonanie dowolnego kodu poprzez parametr filter w wielu punktach końcowych. Ta podatność umożliwia atakującemu uruchamianie poleceń systemowych na infrastrukturze bazowej za pomocą operatora $func MongoLite.

W urządzeniu TOTOLINK N200RE V5 odkryto podatność na wstrzykiwanie poleceń poprzez parametry macstr i bandstr w funkcji formMapDelDevice.

Jenkins GitHub Plugin version 1.46.0 and earlier improperly processes the current job URL in JavaScript, leading to a stored XSS vulnerability. Attackers with Overall/Read permissions can exploit this flaw.

Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker-controlled HTTP response headers. The application constructs local file paths using values derived from HTTP headers without validation, allowing attackers to write files outside the intended update staging directory.

Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success, allowing attacker-supplied executables to be accepted and later executed by the application.

MegaCMS version 12.0.0 has an SQL injection (SQLi) vulnerability in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The issue arises from inadequate validation and sanitization of user input.

Google Chrome prior to version 147.0.7727.138 has a use-after-free vulnerability in the GPU component. A remote attacker can potentially escape the browser sandbox via a crafted HTML page.

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the device label or documentation containing these values can authenticate to the several endpoints and execute arbitrary commands as root on the device.