CVE Vulnerability Catalog

In geniezone, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

A vulnerability was found in nextlevelbuilder GoClaw up to version 3.11.3 in the auth function of file internal/http/evolution_handlers.go, leading to improper authorization. The attack can be executed remotely, and the exploit has been disclosed publicly. The project tagged the issue as a bug.

Vulnerability in GoClaw (nextlevelbuilder) up to version 3.11.3 allows improper privilege management through manipulation in the handleSave function of the file internal/http/tts_config.go. Affects the RoleAdmin Gateway component.

Dolibarr ERP CRM up to 23.0.1 has an improper authorization vulnerability in the checkUserAccessToObject function in the Leave Request API.

A security flaw was discovered in AstrBotDevs AstrBot 4.23.6. It affects unknown code in the file /api/skills/delete of the API Endpoint component. Manipulating the Name argument results in path traversal. The attack can be initiated remotely. The exploit has been released.

Vulnerability in AstrBot (AstrBotDevs) version 4.24.2 allows authorization bypass by manipulating the session_id argument in the astr_main_agent function of the file astrbot/core/astr_main_agent.py.

An incorrect authorization vulnerability was found in AstrBot 4.23.6 in the function _normalize_rw_path in file astrbot/core/tools/computer_tools/fs.py. The attack can be performed remotely, and the exploit is publicly available. The vendor did not respond to the disclosure.

A vulnerability was found in AstrBot version 4.23.6 in the function _sanitize_prompt_description of file astrbot/core/skills/skill_manager.py, allowing remote injection. The exploit has been made public, and the vendor did not respond.

A SQL injection vulnerability was found in code-projects Online Hospital Management System 1.0 in the file appointmentdetail.php of the Appointment Handler component via the editid argument. The attack can be performed remotely, and the exploit is publicly available.

A vulnerability was found in MetaCRM 6.4.0 by Metasoft 美特软件 in the file develop/systparam/softlogo/upload.jsp. An unknown function allows unrestricted file upload. The attack can be performed remotely and the exploit has been published.

In OFCMS 1.1.3, the Query function in SysUserController.java (JSON Query Interface component) is vulnerable to SQL injection. The attack can be performed remotely, and the exploit is publicly available.

A vulnerability was found in OFCMS 1.1.3 in the JSON Query interface in SystemParamController.java. The Query function allows SQL injection. The attack can be performed remotely and the exploit has been published.

In OFCMS 1.1.3, the Query function in SystemDictController.java (JSON Query Interface component) is vulnerable to SQL injection. The attack can be performed remotely, and the exploit is publicly available.

In Assimp up to version 6.0.4, a vulnerability was found in the function glTFCommon::CopyValue in library glTFCommon.h of the 4x4 Matrix Parser component. Manipulation leads to a heap-based buffer overflow. The attack requires local access.

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the 'Is visible for customer' flag and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend.

A heap-based buffer overflow vulnerability was discovered in DCMTK 3.7.0 in the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages in file dcmqrdb/libsrc/dcmqrdbi.cc. Remote attack is possible. A patch is available with ID 0f78a4ef6f645ea5530166e445e5436a5de58e75.

A vulnerability was found in OFCMS up to version 1.1.3 in the file ComnController.java. The Query function with argument system.user.query allows SQL injection. The attack can be performed remotely and the exploit has been published.

A vulnerability was found in Tenda W12 3.0.0.7(4763). It affects the cgiSysWebTimeoutSet function in the file /bin/httpd of the Web Management Interface component. Manipulating the web_over_time argument results in denial of service. The attack can be launched remotely. The exploit has been made public.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formWlanSetup function. Manipulating the enrollee argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formSysCmd function. Manipulating the sysCmd argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.