CVE Vulnerability Catalog

A Server-Side Request Forgery (SSRF) vulnerability was discovered in 4C Strategies Exonaut prior to version 21.6.2.1-1. This allows an attacker to send requests from the server to internal network resources.

Insecure permissions were discovered in 4C Strategies Exonaut prior to version 22.4, potentially allowing unauthorized access to resources.

In SSCMS version 7.3.1, the component /stl/actions/download?filePath is vulnerable to directory traversal. This allows an attacker to read arbitrary files outside the intended directory.

A file upload vulnerability exists in Writebot AI Content Generator SaaS React Template through version 4.0.0, allowing remote attackers to escalate privileges via a crafted POST request to the /file-upload endpoint.

A Cross-Site Scripting (XSS) vulnerability was found in SeaCMS before version 13.2 via the 'vid' parameter in Upload/js/player/dmplayer/player. It allows a remote attacker to inject malicious JavaScript code into the page.

An XSS vulnerability in the reconcile method of the AttachmentReconciler class in Halo system v.2.20.18LTS and earlier allows an attacker to inject malicious scripts.

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.

A vulnerability in CPUID cpuz.sys version 1.0.5.4 allows an attacker to use DeviceIoControl with unvalidated parameters to perform RDMSR and WRMSR operations. This enables modification of the MSR_LSTAR register and hooking of the KiSystemCall64 syscall, followed by ROP-based exploitation to disable the SMAP flag in CR4 and execute code in kernel context.

An infinite recursion vulnerability was found in Artifex MuPDF versions 1.25.5 and 1.25.6 within the `mutool clean` utility. A remote attacker can cause a denial of service (DoS) by supplying a crafted PDF file with cyclic /Next references in the outline structure.

A vulnerability in the pdfseparate utility of the poppler library version 25.04.0 allows an attacker to trigger infinite recursion by supplying a crafted PDF file. This leads to a Denial of Service (DoS).

A memory leak flaw was found in the Linux kernel's ksmbd component. If a client sends a session setup request with an unknown NTLMSSP message type, it can lead to resource exhaustion.

A flaw in the Linux kernel's ksmbd component causes a deadlock when multiple concurrent session setup requests are sent, potentially leading to a denial of service.

In Sipwise rtpengine before version 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets, except when the relay is configured for strict source and learning disabled.

A file upload vulnerability in CS Cart 4.18.3 allows unrestricted upload of HTML files, which are rendered directly in the browser. Attackers can upload crafted HTML files containing malicious content, such as fake login forms for credential harvesting or scripts for Cross-Site Scripting (XSS) attacks. Since the content is served from a trusted domain, it significantly increases the likelihood of successful phishing or script execution against other users.

A Cross Site Request Forgery (CSRF) vulnerability was found in CS Cart 4.18.3. It allows attackers to add products to a user's comparison list via a crafted HTTP request.

A vulnerability in Aver PTC310UV2 firmware version 0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function.

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

A PHAR deserialization vulnerability in the /themes/import component of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

A flaw in the Linux kernel's handling of new TCP connections causes memory not to be released after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system.

A vulnerability in WebKit allows Safari to crash when processing maliciously crafted web content. The issue was fixed by improving memory handling.