85 matches found
CVE-2025-61606
WeGIA is affected: open redirect in the control.php endpoint via the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle) for versions 3.4.12 and below. This could redirect users to arbitrary external domains, enabling phishing or credential theft as described in the CVE entries. Th...
CVE-2025-6573 GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Kernel software installed and running inside an untrusted/rich execution environment REE could leak information from the trusted execution environment TEE...
Code-Projects Online Movie Streaming 安全漏洞
Code-Projects Online Movie Streaming is an online movie streaming software from Code-Projects open source. A security vulnerability exists in Code-Projects Online Movie Streaming version 1.0, which stems from a lack of authorization due to incorrect manipulation of the parameter ID in the file...
WeGIA 输入验证错误漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from an open redirection vulnerability that stems from the control.php endpoint not handling target jumps appropriately, no detailed vulnerability details are provided at this time...
CVE-2024-46054
OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...
Adobe ColdFusion Improper Access Control Vulnerability (CNVD-2025-10394)
Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...
Autodesk Revit 缓冲区错误漏洞
Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that originates from an out-of-bounds write due to a malicious RCS file, which could lead to the execution of arbitrary code...
CVE-2024-7043
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all...
Wazifa System control.php File SQL Injection Vulnerability
Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the /controllers /control.php file. An attacker can exploit this vulnerability to execute illegal SQL commands t...
PT-2025-6852 · Unknown · Code-Projects Wazifa System
Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue has been found in the code-projects Wazifa System, affecting an unknown functionality of the file /controllers/control.php. The manipulation of an argument leads to a SQL...
Code-Projects Wazifa System 注入漏洞
Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the /controllers /control.php file. An attacker can exploit this vulnerability to execute illegal SQL commands t...
PT-2025-3393 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.0 Description: The issue concerns an incorrect access control in the controle/control.php file. Specifically, the application fails to validate the value of the old password, allowing password changes by entering a...
Edgecross Basic Software 安全漏洞
Edgecross Basic Software is a software platform used in the Edge Computing space from Edgecross, Inc. that provides a variety of features to support data utilization and processing. A security vulnerability exists in Edgecross Basic Software ECP-BS1-W-D 1.00 and earlier versions, which originates...
Wazifa System control.php File SQL Injection Vulnerability
Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter to of the file /controllers/control.php. An attacker can exploit this vulnerability to execute illegal...
CVE-2024-10742
A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...
PT-2024-16506 · Unknown · Wazifa System
Name of the Vulnerable Software and Affected Versions: Wazifa System version 1.0 Description: A critical issue affects the processing of the file /controllers/control.php, where the manipulation of the argument leads to sql injection. The attack may be initiated remotely. The exploit has been...
Code-Projects Wazifa System SQL注入漏洞
Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter to of the file /controllers/control.php. An attacker can exploit this vulnerability to execute illegal...
PT-2024-5264 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been identified in the system, specifically affecting the /control/add act.php file. The manipulation of the aname argument leads to SQ...
CVE-2024-3617
A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some unknown processing of the file /control/deactivatecase.php. The manipulation of the argument id leads to sql injection. The attack may be...
