CVE Vulnerability Catalog

A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/users/index.php. Manipulation of the Username argument allows remote SQL injection. The exploit is public.

W kodzie projektu E-Commerce Website w wersji 1.0 zidentyfikowano podatność, która dotyczy nieznanej części pliku /pages/supplier_update.php. Manipulacja argumentem supp_id prowadzi do wstrzyknięcia SQL.

A cross-site scripting (XSS) vulnerability was found in code-projects Voting System 1.0 in the file /admin/voters_add.php. Manipulating the Firstname/Lastname/Platform arguments allows remote attack. The exploit has been publicly disclosed and may be used.

In Flowise versions prior to 3.0.8, WriteFileTool and ReadFileTool do not restrict file path access, allowing authenticated attackers to read and write arbitrary files to any path, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/supplier_add.php. Manipulating the supp_email argument allows remote attack. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/product_add.php. Manipulating the prod_name argument allows remote attack. The exploit has been publicly disclosed and may be used.

A security vulnerability has been detected in code-projects Voting System 1.0, affecting an unknown function of /admin/voters_add.php. Manipulation of the photo argument leads to unrestricted upload, and the attack can be launched remotely. The exploit has been publicly disclosed.

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Zidentyfikowano słabość w systemie zarządzania salonem piękności PHPGurukul w wersji 1.1. Problem dotyczy nieznanej funkcji w pliku /admin/search-invoices.php, która umożliwia wstrzyknięcie SQL poprzez manipulację argumentem searchdata.

W systemie zarządzania salonem piękności PHPGurukul w wersji 1.1 odkryto lukę bezpieczeństwa. Problem dotyczy nieznanej funkcji w pliku /admin/search-appointment.php, gdzie manipulacja argumentem searchdata prowadzi do wstrzykiwania SQL.

W systemie zarządzania salonem piękności PHPGurukul w wersji 1.1 zidentyfikowano podatność. Manipulacja argumentem delid w pliku /admin/new-appointment.php prowadzi do wstrzykiwania SQL, co umożliwia zdalne przeprowadzenie ataku.

W systemie zarządzania salonem piękności PHPGurukul w wersji 1.1 zidentyfikowano podatność. Problem dotyczy nieznanego przetwarzania pliku /admin/manage-services.php, co może prowadzić do wstrzyknięcia SQL poprzez manipulację argumentem delid.

In GNU Binutils 2.45, the elf_x86_64_relocate_section function in elf64-x86-64.c of the Linker component has a heap-based buffer overflow. The attack can only be executed locally, and the exploit has been publicly disclosed. It is recommended to deploy the patch named 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0.

In GNU Binutils 2.45, the _bfd_x86_elf_late_size_sections function in bfd/elfxx-x86.c of the Linker component has an out-of-bounds read. The attack needs to be approached locally, and the exploit has been made public. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a.

In Casdoor version 2.26.0 and earlier, a vulnerability in the permission verification module and organization/application editing interface allows remote authenticated administrators of any organization to bypass the system's permission verification mechanism by directly concatenating URLs after login. The issue is fixed in version 2.63.0.

An OS Command Injection vulnerability in the Admin panel of Curo UC300 version 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS commands via the "IP Addr" parameter.

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function CommandManager of the file src/command-manager.ts. Performing manipulation results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor explains: "The usual use case is that AI is asked to do something, picks commands itself, and typically uses simple command names without absolute paths. It's curious why a user would ask the model to bypass restrictions this way. (...) This could potentially be a problem, but we are yet to hear reports of this being an issue in actual workflows. We'll leave this issue open for situations where people may report this as a problem for the long term."

Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests.

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility (LTV) sensors.