CVE Vulnerability Catalog

Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking. This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection. This issue affects DX NetOps Spectrum: 23.3.6 and earlier.

Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.

WeKnora prior to version 0.2.5 has a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONService page (including guest users) can exploit a SQL injection vulnerability by accessing database info or starting a DoS attack. This issue has been patched in version 2.4.5.

In React Router and Remix Run libraries, a vulnerability allows reading/writing session files outside the specified directory when using createFileSessionStorage() with an unsigned cookie. An attacker can cause the session to access locations outside the intended session file directory, depending on web server process permissions.

OpenProject before version 16.6.4 contains a Local File Read vulnerability in the work package PDF export. By uploading a specially crafted SVG file (disguised as PNG) as an attachment, an attacker can exploit the ImageMagick engine to read arbitrary local files accessible to the application user.

Sangfor Operation and Maintenance Management System up to 3.0.8 contains an OS command injection vulnerability in the WriterHandle.getCmd function of the /isomp-protocol/protocol/getCmd file. Manipulating the sessionPath argument allows remote command execution.

Salesforce Uni2TS through version 1.2.0 contains a code injection vulnerability that allows leveraging executable code in non-executable files. The issue affects MacOS, Windows, and Linux.

Sangfor Operation and Maintenance Management System up to 3.0.8 contains an OS command injection vulnerability in the /isomp-protocol/protocol/getHis file. Manipulating the sessionPath argument in an HTTP POST request allows remote command execution.

EDIMAX BR-6208AC router version V2_1.02 is vulnerable to command injection. The pppUserName field is passed directly to the system() function without proper sanitization, allowing an attacker to execute arbitrary code.

Odkryto podatność na wstrzykiwanie poleceń w usłudze DHCP daemon w D-Link DIR895LA1 v102b07. Podatność występuje w logice przetwarzania odnawiania dzierżawy, gdzie parametr nazwy hosta DHCP jest bezpośrednio łączony z poleceniem systemowym bez odpowiedniej sanitizacji.

Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 contain hardcoded credentials for an OS user account in an initialization script. An attacker can use these credentials to authenticate via SSH and access the Docker socket, allowing container escape and execution of commands as root.

Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 expose a command execution service on TCP port 2004 running with root privileges. Authentication relies on a hardcoded TOTP secret and static token, allowing an attacker to execute arbitrary OS commands.

AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerability in the Login Widget. The login_error parameter is processed as PHP code, allowing an attacker to execute arbitrary PHP in the context of the WordPress web server.

Portal BET firmy BeeS Software Solutions zawiera podatność na wstrzykiwanie SQL w funkcjonalności logowania. Ta podatność umożliwia wykonanie dowolnych poleceń SQL na bazie danych w tle.

KAON CG3000TC and CG3000T routers contain hard-coded credentials in clear text, shared across all routers of this model. An unauthenticated remote attacker can use them to execute commands with root privileges. The vulnerability is fixed in firmware versions 1.00.67 (CG3000TC) and 1.00.27 (CG3000T).

Vivotek IP7137 camera with firmware version 0200a does not require a password by default when logging in as administrator. Users are not informed of the need to set a password, allowing unauthorized access. The product is End-of-Life, so a fix is not expected.

Podatność CVE-2025-64093 umożliwia zdalne wykonanie kodu, pozwalając nieautoryzowanym atakującym na wstrzykiwanie dowolnych poleceń do nazwy hosta urządzenia. To stwarza poważne zagrożenie dla bezpieczeństwa systemu.

Ta podatność pozwala uwierzytelnionym atakującym na wykonywanie poleceń za pomocą nazwy hosta urządzenia.