CVE Vulnerability Catalog

Vulnerability in Aider (Aider-AI) version 0.86.3 allows SSRF (Server-Side Request Forgery) through manipulation in the requests.get function of the api_docs.py file, affecting the AWS EC2 Metadata Endpoint component.

A vulnerability was found in Aider 0.86.3 by Aider-AI in the Code Generation Workflow component. An unknown functionality allows SQL injection. The attack can be performed remotely and the exploit has been published.

Aider-AI Aider 0.86.3 has a vulnerability in the Architect Mode component, in file auth.py, function editor_coder.run. Manipulation leads to code injection. The attack can be performed remotely. The exploit has been published and may be used. The project was informed but has not responded.

A vulnerability was identified in Aider version 0.86.3 in an unknown function of file aider/args.py in the Pre-commit Hook Handler component. Manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely, and the exploit is publicly available. The project was informed but did not respond.

A weakness has been identified in Orthanc Explorer 2 up to version 1.12.0. An unknown function in WebApplication/src/components/StudyList.vue of the URL Handler component is vulnerable to cross site scripting via the remote-source argument. The attack can be initiated remotely and the exploit is public.

Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows unrestricted file upload by manipulating the module argument in the Upload function of the file application/modules/dashboard/controllers/Module.php.

Vulnerability in code-projects Online Music Site 1.0 allows SQL Injection by manipulating the ID argument in the file /Administrator/PHP/AdminUpdateAlbum.php.

Code-projects Visitor Management System 1.0 has an SQL injection vulnerability in file /vms/php/phone_0.php via the phone argument. The attack can be performed remotely. The exploit has been published and may be used.

OUSL-GROUP-BrinaryBrains School Student Management System up to commit 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 has a vulnerability in the marks function of file application/controllers/Parents.php. Manipulation of the param1 argument leads to improper control of resource identifiers. The attack can be performed remotely. The exploit has been published. The project has not responded.

A vulnerability in the Advanced Custom Fields (ACF) plugin for WordPress (up to version 6.8.1) allows authorization bypass. Unauthenticated attackers can overwrite the post_title and post_content of any post bound to a publicly accessible acf_form() instance by injecting values into the _post_title and _post_content parameters of a form submission request.

Edimax BR-6478AC router version 1.23 has a command injection vulnerability in the formWlbasic function. Manipulating the rootAPmac argument allows remote command execution. The exploit is public.

In Open5GS up to version 2.7.7, the handle_amf_info function in the /lib/sbi/nnrf-handler.c library of the nf-instances Endpoint component allows resource consumption via manipulation of the nf_info_pool argument. The attack is remotely exploitable and the exploit is publicly available.

Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows SQL Injection by manipulating the dtpToDate argument in the accounts_report_search function of the file application/modules/accounts/controllers/Accounts.php.

Dolibarr ERP CRM versions 23.0.0, 23.0.1, and 23.0.2 have a vulnerability in an unknown function in htdocs/user/messaging.php, where manipulation of the ID argument leads to authorization bypass. The attack can be executed remotely. The fix is available in version 23.0.3.

In westboy CicadasCMS up to commit 2431154dac8d0735e04f1fd2a3c3556668fc8dab, the Search function in org/springframework/cache/support/AbstractCacheManager.java is vulnerable to cross-site scripting (XSS) via the s argument. Remote exploitation is possible and the exploit is public.

Vulnerability in lin-cms-spring-boot (TaleLin) up to version 0.2.1 allows improper access controls through manipulation in the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java, affecting the book Endpoint component.

In Edimax BR-6478AC 1.23, the formStaDrvSetup function in /goform/formStaDrvSetup is vulnerable to command injection via the rootAPmac argument. The attack can be performed remotely, and the exploit is publicly available.

A vulnerability was found in the Text::LineFold module for Perl (part of the Unicode-LineBreak distribution). The module splits the input string into segments based on special line break characters but applies the break function to the entire string, not just the segment. This causes output duplication for each segment, potentially leading to excessive resource consumption and denial of service.

A buffer overflow vulnerability in Arm Whois 3.11 allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service.

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.