CVE Vulnerability Catalog

The U-SPEED AC1200 Gigabit Wi-Fi Router (Model T18-21K) V1.0 is vulnerable to Command Injection in the NTP configuration interface due to improper input sanitization. An authenticated user with NTP configuration permissions can inject arbitrary system commands.

In Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. Successful exploitation allows an attacker to cross a security boundary.

A vulnerability in BIG-IP scripted monitors allows an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges. In appliance mode deployments, a successful exploit can allow the attacker to cross a security boundary.

A vulnerability in BIG-IP and BIG-IQ systems allows a highly privileged, authenticated attacker with at least the Certificate Manager role to modify configuration objects, enabling arbitrary command execution.

An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system. The vulnerability affects software versions that have not reached End of Technical Support.

The striso-control-firmware version 54c9722 is vulnerable to buffer overflow in the AuxJack function.

striso-control firmware version 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons.

A buffer overflow vulnerability was discovered in the Firmament-Autopilot FMT-Firmware commit de5aec via the task_mavobc_entry function in /comm/task_comm.c.

Joomla J2 JOBS version 1.3.0 contains an authenticated SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send malicious 'sortby' values in POST requests to the administrator index to extract sensitive database information.

Joomla J2 JOBS version 1.3.0 contains an authenticated SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

In IObit Uninstaller 9.5.0.15, an unquoted service path vulnerability in the IObitUnSvr service allows local attackers to escalate privileges to SYSTEM level by placing a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restarting the service.

Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint.

Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string to the display name textbox in the Time Zones Clock configuration.

The Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by retrieving the device serial number. Attackers can query the /api/system/deviceinfo endpoint without authentication to extract the SerialNumber field.

Joomla com_fabrik version 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax_files method with path traversal sequences to enumerate files in system directories outside the intended web root.

Joomla com_hdwplayer version 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter.

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the pm_invite_user function in all versions up to and including 5.9.8.4. This allows authenticated attackers, with Subscriber-level access and above, to add themselves or any registered user to any ProfileGrid group, including closed and paid groups, bypassing all authorization and payment gates.

CVE-2026-39806 vulnerability in mtrudel bandit allows remote denial of service via worker process exhaustion. The issue occurs in the do_read_chunked_data!/5 function, which does not terminate correctly when trailer fields are present in chunked requests.

CVE-2026-39803 in mtrudel bandit has a resource allocation without limits vulnerability that allows unauthenticated remote denial of service via memory exhaustion. The do_read_chunked_data!/5 function does not cap the size of buffered data, leading to memory overflow.

An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms allows attackers to execute arbitrary code via uploading a crafted file.