CVE Vulnerability Catalog

A cross-site scripting vulnerability was found in the file dashboard/studentConductManager.php in igweze wizgrade up to commit b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability was found in TRENDnet TEW-821DAP version 1.11B03, affecting the function sub_41FBD0 in the file /goform/system_ntp. Remote manipulation of the Hostname argument allows OS command injection. The vendor states the device is end-of-life (EOL) and will not receive patches.

A vulnerability was found in TRENDnet TEW-821DAP firmware version 1.11B03, allowing OS command injection via the hostname, username, and password parameters in the /goform/tools_ddns file. The attack can be performed remotely, and the vendor states the device is end-of-life (EOL).

A flaw in TRENDnet TEW-821DAP version 1.11B03 allows OS command injection via the sub_43F2C4 function in /goform/tools_nslookup. The attack is remotely exploitable by manipulating the nslookup_target or dns_server arguments. The vendor states the device is end-of-life (EOL) and will not receive patches.

A SQL injection vulnerability has been found in IceHRM up to version 35.0.1 in the EmployeeAttendanceReport.php file. An attacker can remotely manipulate the employeeList argument, leading to unauthorized database access. The exploit has been published and may be used.

A SQL injection vulnerability was found in Bahmni bahmnicore up to version 0.93. The additionalParams function in the file /openmrs/ws/rest/v1/bahmnicore/sql of the Search Endpoint allows manipulation of the test argument, enabling remote SQL execution. The exploit is publicly available.

A vulnerability in the kernel driver of QILING Disk Master 6.0.0.0 (library diskbckp.sys) involves improper access controls. The attack requires local access and has been publicly disclosed.

A weakness in the pwdrvio.sys kernel driver of MiniTool Partition Wizard up to version 13.6 allows improper access control. The attack requires local access and the exploit is publicly available. Upgrading to version 13.9 fixes the issue.

An improper authorization vulnerability has been discovered in Eleveo Call Recording Software 9.7.0. The unknown function in the /callrec/audio.jsp file fails to properly validate permissions for the callId parameter, allowing unauthorized access. The attack can be performed remotely and the exploit is publicly available.

A vulnerability was found in Eleveo Call Recording Software 9.7.0, involving improper authorization in the Recorded Calls Page component. Manipulation of the /callrec/restoreCallAction.do file allows unauthorized access. The attack is remotely exploitable and a public exploit exists.

A vulnerability was found in Eleveo Call Recording Software 9.7.0 in the file /callrec/composeEmailAction.do. Unknown code allows remote manipulation leading to improper authorization. The exploit has been publicly disclosed and may be used.

A vulnerability in Eleveo Call Recording Software 9.7.0 was found in the /callrec/pci_dss_status.jsp file, allowing unauthorized access. The attack can be performed remotely and the exploit has been made public. The vendor did not respond to the disclosure.

A vulnerability was found in Eleveo Call Recording Software 9.7.0 in the file /callrec/group.jsp. An unknown functionality leads to improper authorization, which can be exploited remotely. The exploit has been publicly disclosed and may be used.

A vulnerability in the Bluetooth BAP Broadcast Assistant GATT client in Zephyr RTOS causes buffer overflow and cross-connection data corruption. A shared 512-byte buffer for all connection instances, combined with concurrent notifications from multiple Scan Delegator devices, can lead to out-of-bounds writes and data mixing between connections.

The Grav Admin2 plugin before version 2.0.4 embeds a global JavaScript variable `window.__GRAV_CONFIG__` in the unauthenticated SPA bootstrap page. This object exposes the server URL, API prefix, admin base path, runtime environment type, and exact Grav and Admin2 version numbers.

A vulnerability in PraisonAI before version 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can use path traversal sequences like @../outside_secret.txt or absolute paths to exfiltrate process-readable files into model prompts.

A vulnerability in Hono before version 4.12.7 allows the __proto__ key in parseBody with the dot option enabled, permitting specially crafted form field names to create objects with __proto__ properties. When parsed results are merged into regular JavaScript objects using unsafe merge patterns, attackers can exploit this to achieve prototype pollution and modify object behavior.

A vulnerability in Cap-go before version 12.128.2 discloses information via the public.transfer_app RPC function, which returns different error messages for existing and non-existing app IDs. Unauthenticated attackers can enumerate valid app IDs by observing error message differences using only the publishable API key.

A vulnerability in Capgo before version 12.128.12 allows billing authorization bypass due to a discrepancy in the plan_valid calculation. Organizations with exhausted or expired credit grants can still access /updates, /stats, /channel_self, and attachment upload endpoints.

The NEX-Forms plugin for WordPress up to version 9.2.2 has an authorization bypass vulnerability that allows unauthenticated attackers to overwrite the saved_admin_email, saved_user_email, and saved_user_email_address fields of arbitrary form entries belonging to other users. Attackers can also send attacker-controlled email content to chosen recipient addresses.