CVE Vulnerability Catalog

A cross-site scripting (XSS) vulnerability was found in code-projects Simple Laundry System 1.0 in the file /modstaffinfo.php. Manipulating the userid argument allows remote script injection. The exploit has been publicly disclosed.

The Simple Laundry System 1.0 has an XSS vulnerability in the file /modmemberinfo.php. Manipulation of the userid argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.

Race condition vulnerability during TCP connection teardown in an unspecified component. The tcp_recv() function may operate on a released connection. If tcp_conn_search() returns NULL while processing a SYN packet, a NULL pointer is passed to tcp_backlog_is_full() and dereferenced without validation, causing a crash.

The Simple Laundry System 1.0 has an XSS vulnerability in the file /modifymember.php. Manipulation of the firstName argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.

QingdaoU OnlineJudge up to version 1.6.1 has a Server-Side Request Forgery (SSRF) vulnerability in the service_url function of JudgeServer.service_url in the judge_server_heartbeat endpoint. Manipulation of this parameter allows SSRF attacks.

A SQL injection vulnerability was found in halex CourseSEL up to version 1.1.0 in the check_sel function of IndexController.class.php. Manipulation of the seid argument via HTTP GET allows remote attack. The exploit has been disclosed, and the vendor did not respond.

FedML-AI FedML versions up to 0.8.9 contain a path traversal vulnerability in the MQTT Message Handler component in FileUtils.java. An attacker can remotely manipulate the dataSet argument, leading to access to files outside the allowed directory.

In badlogic pi-mono 0.58.4, a cross-site scripting (XSS) vulnerability exists in packages/web-ui/src/tools/artifacts/SvgArtifact.ts in the SVG Artifact Handler component. Remote exploitation is possible and the exploit is public.

A vulnerability was detected in ScrapeGraphAI scrapegraph-ai up to version 1.74.0 allowing OS command injection via the create_sandbox_and_execute function in scrapegraphai/nodes/generate_code_node.py. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

Cleartext storage vulnerability in SourceCodester Student Result Management System 1.0. An unknown function in the file /login_credentials.txt of the HTTP GET Request Handler component stores credentials in cleartext. The attack can be performed remotely, exploit is public.

Ollama up to version 0.18.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the Model Pull API component (file server/download.go). An attacker can remotely manipulate the request, leading to requests being sent to internal resources.

In Dromara lamp-cloud up to version 5.8.1, an improper authorization vulnerability exists in the pageUser function of /defUser/pageUser in the DefUserController component. Remote exploitation is possible and the exploit is public.

A vulnerability was detected in MoussaabBadla code-screenshot-mcp up to version 0.1.0 allowing OS command injection via the HTTP Interface component. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.

In Tenda 4G03 Pro version 1.0/1.0re/01.bin/04.03.01.53, a hard-coded ECDSA P-256 cryptographic key is used in /etc/www/pem/server.key. The attack can be performed remotely.

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints to create users or modify application settings without explicit consent.

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field. Local attackers can cause a denial of service by pasting a 2000-byte string into this field, crashing the application.

FTP Voyager 16.2.0 contains a denial of service vulnerability via buffer overflow. A local attacker can inject 500 bytes of repeated characters into the site profile IP field, causing the application to crash.

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit the comment.

The MyBB Like Plugin version 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject malicious scripts into post or thread subjects, which are rendered unsanitized when viewing a profile displaying liked posts.

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.