Blair Jersyer NexoPOS authorization issue vulnerability

Blair Jersyer NexoPOS versions 6.2.4 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the/api/fields/resource/identifier API. Unverified attackers can access transaction field classes such as nsentity-transaction, and use sequentia...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the fact that the endpoint for switching account...

Smartloli EFAK authorization issue vulnerability

SmartLoli EFAK versions 5.1.0 and earlier have an authorization issue. This vulnerability stems from the lack of a role check for the/api/users endpoint. Certified low-privilege users can manage their accounts by sending POST, PUT, or DELETE requests to the UserController. This allows them to gra...

BeikeShop authorization issue vulnerability

BeikeShop versions 2.0.0.31 and earlier have an authorization issue vulnerability. This vulnerability stems from an insecure direct object reference in the markAsShipped handler of the RmaController. An attacker can submit consecutive RMA IDs to the account/rmas/id/markasshipped endpoint, overwri...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.34 have an authorization vulnerability. This vulnerability stems from the lack of mandatory authentication during WebSocket upgrade requests at the browser container endpoint/api/containers//exec. This allows unverified attackers to initiate raw WebSocket...

Mattermost input validation vulnerability

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have a input validation vulnerability. This vulnerability stems from the failure to verify the integrity of the SAML...

tduck-survey-form authorization issue vulnerability

The tduck-survey-form 5.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification, which may allow any authenticated user to retrieve the original form settings of other owners through the GET /user/form/setting/key...

JoeyZhou Xiaozhi ESP32 Server Java Authorization Vulnerability

JoeyZhou Xiaozhi ESP32 Server Java 6.1.0 and earlier versions have an authorization issue. This vulnerability stems from an authentication bypass. Unverified attackers can obtain a valid device WebSocket token by making a request to/api/device/ota with any MAC address. This allows them to open th...

izhaorui Zr.Admin.NET SQL Injection Vulnerability

Zr.Admin.NET versions 3.8.2 and earlier have a SQL injection vulnerability. This vulnerability stems from the use of the GET /system/user/list endpoint to pass a specially crafted PagerInfo.Sort query parameter to the shared ToPage pagination helper function. Attackers can exploit this...

sgl-project SGLang Code Injection Vulnerability

The SGLang project from version 0.5.10 to 0.5.22 has a code injection vulnerability. This vulnerability stems from a code injection issue in the evaluatefilter function. Attackers can escape the eval sandbox by using re.search.globals, and can execute Python code. They can also send specially...

qaiu netdisk-fast-download encryption vulnerability

The qaiu netdisk-fast-download version 0.4.8 and earlier have a security vulnerability. This vulnerability stems from an information leakage issue with the /v2/randomAuth endpoint in the ParserApi. An attacker can repeatedly call this endpoint and use the hardcoded AES key nfdauthkey2026 to decry...

Faveo Helpdesk Authorization Issue Vulnerability

Faveo Helpdesk 2.0.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control. Certified agents can enumerate consecutive ticketid values on the GET /ticket/tooltip endpoint through the getTooltip handler, allowing them to read chat...

D solo authorization issue vulnerability

D solo 4.4.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an ownership check for authors in ArticleConsole. As a result, authenticated authors can access articles of other authors. Attackers can query the console’s article status endpoi...

Qiantong Tech qKnow Authorization Issues Vulnerability

Qiantong Tech’s version 2.4.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authentication. Unauthenticated remote attackers can access the /flyflow workflow integration endpoint allowed in SecurityConfig. By submitting consecutive userId values to...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the fact that Slack import account binding is not...

Rachel Weirs Code Injection Vulnerability

Rachel WeRSS versions 1.5.3 and earlier have a code injection vulnerability. This vulnerability stems from the lack of input validation for the template parameter in the public GET /rss/feedid API. Attackers can bypass the eval blacklist by using non-built-in ext values and =expression templates...

zmister2016 MrDoc Authorization Issue Vulnerability

zmister2016 MrDoc versions 1.1.1 and earlier have an authorization issue. This vulnerability stems from the lack of object-level authorization in the ImportLocalDoc API. It may allow authenticated users to modify other users’ documents and projects by sending PUT requests containing arbitrary...

ChaskiqHQ Chaskiq Server Request Forgery Vulnerability

ChaskiqHQ Chaskiq 2.0.3 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of URL parameters at the /oembed endpoint. Unverified attackers can use FetchLinkCardService to send server requests to arbitrary URLs, access loopback,...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the lack of verification of the recipient’s email...

Mattermost information leakage vulnerability

Mattermost versions 11.9.1 and earlier of 11.9.x series, 11.8.5 and earlier of 11.8.x series, 11.7.10 and earlier of 11.7.x series, and 11.10.1 and earlier of 11.10.x series have a vulnerability related to information leakage. This vulnerability arises from the lack of a requirement to re-enter t...