CVE Vulnerability Catalog

Zechat version 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter to confirm vulnerability and extract data.

Zechat version 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names.

The Nordex N149/4.0-4.5 Wind Turbine Web Server version 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloads in the login field to extract sensitive database information and bypass authentication mechanisms.

The EkRishta 2.10 extension for Joomla! contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and POST parameters.

The WordPress Plugin WP with Spritz version 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into the url parameter. Attackers can send GET requests to wp.spritz.content.filter.php with malicious url values to access sensitive files like system configuration and credentials.

VX Search version 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute arbitrary code with application privileges.

Google Drive for WordPress version 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the file_name parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to del_fl_bkp and file_name containing traversal sequences ../../wp-config.php to access sensitive configuration files.

Woocommerce CSV Importer version 3.3.6 contains a path traversal vulnerability that allows registered users to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action. Attackers can craft POST requests with directory traversal sequences in the filename parameter.

Allok AVI DivX MPEG to DVD Converter version 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a text file with a specially crafted buffer containing shellcode and SEH chain overwrite values, then paste the contents into the License Name field to trigger code execution.

Allok Fast AVI MPEG Splitter version 1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload of 780 bytes to trigger the overflow and execute code with application privileges.

Redaxo CMS Addon MyEvents version 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents_id parameter.

A security flaw has been discovered in h2oai h2o-3 up to version 7402 in the importBinaryModel function of the h2o-core/src/main/java/hex/Model.java file of the JAR Handler component. Manipulating this function leads to deserialization, which can be exploited in remote attacks.

A vulnerability was identified in Oinone Pamirs up to version 7.2.0 affecting the function RSQLToSQLNodeConnector.makeVariable of the queryListByWrapper interface. This manipulation leads to SQL injection, which can be initiated remotely.

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin version 3.4.9 is vulnerable to privilege escalation. This is due to missing WordPress capability enforcement in the OAuth bearer-token authorization path, allowing access to admin-level MCP tools without verifying administrator privileges.

A weakness has been identified in CoreWorxLab CAAL up to version 1.6.0, affecting an unknown function in the file src/caal/webhooks.py of the test-hass Endpoint component. This manipulation leads to server-side request forgery.

A vulnerability in Das U-Boot before version 2026.04 allows bypassing FIT (Flat Image Tree) signature verification by omitting hashed-nodes from the hash calculation. An attacker can supply a modified FIT image that will be accepted as properly signed.

Fuel CMS version 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface.

The WordPress Plugin Backup and Restore version 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX requests.

The WordPress Plugin Anti-Malware Security and Bruteforce Firewall version 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter.

TextPattern CMS version 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.