CVE Vulnerability Catalog

LINQPad before 5.52.01 Pro is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution.

In versions of yeti-platform before 2.1.12, attackers can generate valid JWT tokens if the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).

A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform before version 2.1.12 allows attackers to execute code on the application server.

A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py.

Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.

Mikrotik RouterOS versions 6.40.5 through 6.49.10 (fixed in 7) allow a remote attacker to cause a device crash via crafted packet data to the SMB service on TCP port 445.

The vulnerability in NAVER MYBOX Explorer for Windows before version 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.

A vulnerability was found in Tenda CX12L version 16.03.53.12, affecting the function formSetPPTPServer in the file /goform/SetPptpServerCfg. Manipulation of this function results in a stack-based buffer overflow, which can be exploited remotely.

A vulnerability has been found in Totolink X5000R version 9.1.0u.6369_B20230113, affecting the function sub_458E40 in the file /boafrm/formDdns. Manipulation of the argument submit-url leads to buffer overflow.

UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation had a critical logic flaw in its policy enforcement pipeline, allowing unauthorized fund spending from 'Pocket'.

Alkacon OpenCms before version 16 allows XXE when the <!DOCTYPE> refers to an external host.

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.

The socket connection handler in the Avast and AVG Windows Anti Rootkit driver before version 22.1 has a vulnerability that allows local attackers to execute arbitrary code in kernel mode or cause a denial of service due to memory corruption and OS crash.

A vulnerability has been detected in zyx0814 FilePress up to version 2.2.0, allowing SQL injection through manipulation of argument order in the dzz/shares/admin.php file of the Shares Filelist API component. The attack can be launched remotely.

A weakness has been identified in CodeAstro Leave Management System 1.0. Manipulation of the argument txt_username in the file /login.php leads to SQL injection vulnerability.

A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/replymsg.php. Manipulation of the argument msgid results in SQL injection.

A vulnerability was identified in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to SQL injection.

A vulnerability was identified in SourceCodester SUP Online Shopping version 1.0, affecting an unknown function in the wishlist.php file. Manipulating the delwlistid argument can lead to SQL injection.

In electerm, prior to version 3.7.9, there is a remote code execution (RCE) vulnerability in the SFTP file editing feature. The filename is passed unsanitized into the command line, allowing an attacker to execute malicious code on the user's machine.

In versions prior to 3.7.16 of the electerm client, the runWidget function in load-widget.js constructs a file path by concatenating user-supplied widget identifiers without any sanitization. This allows an attacker to execute arbitrary JavaScript files on the victim's system.